./Ultimate.py --spec ../../sv-benchmarks/c/Systems_DeviceDriversLinux64_ReachSafety.prp --file ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_ppp.ko-entry_point_false-unreach-call.cil.out.c --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5842f4b8 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_8b2289d1-be5f-4a28-8de3-7eeb4da811f6/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_8b2289d1-be5f-4a28-8de3-7eeb4da811f6/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_8b2289d1-be5f-4a28-8de3-7eeb4da811f6/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_8b2289d1-be5f-4a28-8de3-7eeb4da811f6/bin-2019/uautomizer/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_ppp.ko-entry_point_false-unreach-call.cil.out.c -s /tmp/vcloud-vcloud-master/worker/working_dir_8b2289d1-be5f-4a28-8de3-7eeb4da811f6/bin-2019/uautomizer/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_8b2289d1-be5f-4a28-8de3-7eeb4da811f6/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 6186ef142a0a91a64444136f0ec69676cad8008d ....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Writing human readable error path to file UltimateCounterExample.errorpath Result: FALSE --- Real Ultimate output --- This is Ultimate 0.1.23-5842f4b [2018-11-18 11:48:29,511 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-18 11:48:29,512 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-18 11:48:29,519 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-18 11:48:29,519 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-18 11:48:29,519 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-18 11:48:29,520 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-18 11:48:29,521 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-18 11:48:29,523 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-18 11:48:29,523 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-18 11:48:29,524 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-18 11:48:29,524 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-18 11:48:29,525 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-18 11:48:29,526 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-18 11:48:29,526 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-18 11:48:29,527 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-18 11:48:29,528 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-18 11:48:29,529 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-18 11:48:29,530 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-18 11:48:29,531 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-18 11:48:29,532 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-18 11:48:29,533 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-18 11:48:29,535 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-18 11:48:29,535 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-18 11:48:29,535 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-18 11:48:29,536 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-18 11:48:29,536 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-18 11:48:29,537 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-18 11:48:29,538 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-18 11:48:29,538 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-18 11:48:29,538 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-18 11:48:29,539 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-18 11:48:29,539 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-18 11:48:29,539 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-18 11:48:29,540 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-18 11:48:29,540 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-18 11:48:29,541 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_8b2289d1-be5f-4a28-8de3-7eeb4da811f6/bin-2019/uautomizer/config/svcomp-Reach-64bit-Automizer_Default.epf [2018-11-18 11:48:29,548 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-18 11:48:29,548 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-18 11:48:29,548 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-18 11:48:29,549 INFO L133 SettingsManager]: * to procedures, called more than once=true [2018-11-18 11:48:29,549 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-18 11:48:29,549 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-18 11:48:29,549 INFO L133 SettingsManager]: * Use SBE=true [2018-11-18 11:48:29,550 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-18 11:48:29,550 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-18 11:48:29,550 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-18 11:48:29,550 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-18 11:48:29,550 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-18 11:48:29,550 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-18 11:48:29,550 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-18 11:48:29,551 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-18 11:48:29,551 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-18 11:48:29,551 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-18 11:48:29,551 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-18 11:48:29,551 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-18 11:48:29,551 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-18 11:48:29,551 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-18 11:48:29,552 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-18 11:48:29,552 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-18 11:48:29,552 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-18 11:48:29,552 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-18 11:48:29,552 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-18 11:48:29,552 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-11-18 11:48:29,552 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-18 11:48:29,553 INFO L133 SettingsManager]: * To the following directory=dump/ Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_8b2289d1-be5f-4a28-8de3-7eeb4da811f6/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 6186ef142a0a91a64444136f0ec69676cad8008d [2018-11-18 11:48:29,574 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-18 11:48:29,583 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-18 11:48:29,585 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-18 11:48:29,586 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-18 11:48:29,586 INFO L276 PluginConnector]: CDTParser initialized [2018-11-18 11:48:29,586 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_8b2289d1-be5f-4a28-8de3-7eeb4da811f6/bin-2019/uautomizer/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_ppp.ko-entry_point_false-unreach-call.cil.out.c [2018-11-18 11:48:29,619 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_8b2289d1-be5f-4a28-8de3-7eeb4da811f6/bin-2019/uautomizer/data/2ae4d98a2/be726bc156f947dc861ce4f83b115572/FLAG166700b93 [2018-11-18 11:48:30,204 INFO L307 CDTParser]: Found 1 translation units. [2018-11-18 11:48:30,205 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_8b2289d1-be5f-4a28-8de3-7eeb4da811f6/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_ppp.ko-entry_point_false-unreach-call.cil.out.c [2018-11-18 11:48:30,226 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_8b2289d1-be5f-4a28-8de3-7eeb4da811f6/bin-2019/uautomizer/data/2ae4d98a2/be726bc156f947dc861ce4f83b115572/FLAG166700b93 [2018-11-18 11:48:30,604 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_8b2289d1-be5f-4a28-8de3-7eeb4da811f6/bin-2019/uautomizer/data/2ae4d98a2/be726bc156f947dc861ce4f83b115572 [2018-11-18 11:48:30,607 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-18 11:48:30,608 INFO L131 ToolchainWalker]: Walking toolchain with 5 elements. [2018-11-18 11:48:30,608 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-18 11:48:30,608 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-18 11:48:30,611 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-18 11:48:30,612 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 11:48:30" (1/1) ... [2018-11-18 11:48:30,614 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2a04fe88 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:48:30, skipping insertion in model container [2018-11-18 11:48:30,614 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 11:48:30" (1/1) ... [2018-11-18 11:48:30,620 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-18 11:48:30,691 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-18 11:48:31,729 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-18 11:48:31,765 INFO L191 MainTranslator]: Completed pre-run [2018-11-18 11:48:32,215 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-18 11:48:32,266 INFO L195 MainTranslator]: Completed translation [2018-11-18 11:48:32,266 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:48:32 WrapperNode [2018-11-18 11:48:32,267 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-18 11:48:32,267 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-18 11:48:32,267 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-18 11:48:32,267 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-18 11:48:32,276 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:48:32" (1/1) ... [2018-11-18 11:48:32,276 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:48:32" (1/1) ... [2018-11-18 11:48:32,302 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:48:32" (1/1) ... [2018-11-18 11:48:32,303 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:48:32" (1/1) ... [2018-11-18 11:48:32,352 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:48:32" (1/1) ... [2018-11-18 11:48:32,362 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:48:32" (1/1) ... [2018-11-18 11:48:32,370 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:48:32" (1/1) ... [2018-11-18 11:48:32,382 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-18 11:48:32,383 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-18 11:48:32,383 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-18 11:48:32,383 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-18 11:48:32,384 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:48:32" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8b2289d1-be5f-4a28-8de3-7eeb4da811f6/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-18 11:48:32,435 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-18 11:48:32,436 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-18 11:48:32,436 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~int~X~int~TO~int [2018-11-18 11:48:32,436 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~int~TO~VOID [2018-11-18 11:48:32,436 INFO L138 BoogieDeclarations]: Found implementation of procedure test_and_set_bit [2018-11-18 11:48:32,436 INFO L138 BoogieDeclarations]: Found implementation of procedure test_and_clear_bit [2018-11-18 11:48:32,436 INFO L138 BoogieDeclarations]: Found implementation of procedure __fswab16 [2018-11-18 11:48:32,437 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2018-11-18 11:48:32,437 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2018-11-18 11:48:32,437 INFO L138 BoogieDeclarations]: Found implementation of procedure __kmalloc [2018-11-18 11:48:32,437 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2018-11-18 11:48:32,437 INFO L138 BoogieDeclarations]: Found implementation of procedure __skb_queue_head_init [2018-11-18 11:48:32,437 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_queue_head_init [2018-11-18 11:48:32,437 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_reserve [2018-11-18 11:48:32,438 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_reset_network_header [2018-11-18 11:48:32,438 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2018-11-18 11:48:32,438 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2018-11-18 11:48:32,438 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2018-11-18 11:48:32,438 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_ptr [2018-11-18 11:48:32,438 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_ulong [2018-11-18 11:48:32,438 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2018-11-18 11:48:32,439 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2018-11-18 11:48:32,439 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2018-11-18 11:48:32,439 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_trap [2018-11-18 11:48:32,440 INFO L138 BoogieDeclarations]: Found implementation of procedure netdev_priv [2018-11-18 11:48:32,440 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2018-11-18 11:48:32,440 INFO L138 BoogieDeclarations]: Found implementation of procedure netif_dormant_on [2018-11-18 11:48:32,440 INFO L138 BoogieDeclarations]: Found implementation of procedure netif_dormant_off [2018-11-18 11:48:32,440 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_to_hdlc [2018-11-18 11:48:32,440 INFO L138 BoogieDeclarations]: Found implementation of procedure get_ppp [2018-11-18 11:48:32,440 INFO L138 BoogieDeclarations]: Found implementation of procedure get_proto [2018-11-18 11:48:32,440 INFO L138 BoogieDeclarations]: Found implementation of procedure proto_name [2018-11-18 11:48:32,440 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_type_trans [2018-11-18 11:48:32,440 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_hard_header [2018-11-18 11:48:32,440 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_tx_flush [2018-11-18 11:48:32,441 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_tx_cp [2018-11-18 11:48:32,441 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_cp_event [2018-11-18 11:48:32,441 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_cp_parse_cr [2018-11-18 11:48:32,441 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_rx [2018-11-18 11:48:32,441 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_timer [2018-11-18 11:48:32,441 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_start [2018-11-18 11:48:32,441 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_stop [2018-11-18 11:48:32,441 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_close [2018-11-18 11:48:32,441 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_ioctl [2018-11-18 11:48:32,441 INFO L138 BoogieDeclarations]: Found implementation of procedure mod_init [2018-11-18 11:48:32,441 INFO L138 BoogieDeclarations]: Found implementation of procedure mod_exit [2018-11-18 11:48:32,442 INFO L138 BoogieDeclarations]: Found implementation of procedure activate_pending_timer_1 [2018-11-18 11:48:32,442 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_initialize_hdlc_proto_3 [2018-11-18 11:48:32,442 INFO L138 BoogieDeclarations]: Found implementation of procedure choose_timer_1 [2018-11-18 11:48:32,442 INFO L138 BoogieDeclarations]: Found implementation of procedure reg_timer_1 [2018-11-18 11:48:32,442 INFO L138 BoogieDeclarations]: Found implementation of procedure disable_suitable_timer_1 [2018-11-18 11:48:32,442 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-18 11:48:32,442 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_consume_skb_5 [2018-11-18 11:48:32,442 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kfree_skb_6 [2018-11-18 11:48:32,442 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kfree_skb_7 [2018-11-18 11:48:32,442 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kfree_skb_8 [2018-11-18 11:48:32,442 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kfree_skb_11 [2018-11-18 11:48:32,442 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_dequeue_12 [2018-11-18 11:48:32,443 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_13 [2018-11-18 11:48:32,443 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_mod_timer_14 [2018-11-18 11:48:32,443 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_mod_timer_15 [2018-11-18 11:48:32,443 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_del_timer_16 [2018-11-18 11:48:32,443 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_init [2018-11-18 11:48:32,443 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_add [2018-11-18 11:48:32,444 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_remove [2018-11-18 11:48:32,444 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_contains [2018-11-18 11:48:32,444 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_is_empty [2018-11-18 11:48:32,444 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err [2018-11-18 11:48:32,444 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_err_ptr [2018-11-18 11:48:32,444 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_ptr_err [2018-11-18 11:48:32,445 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err_or_null [2018-11-18 11:48:32,445 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2018-11-18 11:48:32,445 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_initialize [2018-11-18 11:48:32,445 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_free [2018-11-18 11:48:32,445 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_free_int [2018-11-18 11:48:32,445 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb [2018-11-18 11:48:32,445 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_netdev_alloc_skb [2018-11-18 11:48:32,445 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_current [2018-11-18 11:48:32,445 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_final_state [2018-11-18 11:48:32,445 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2018-11-18 11:48:32,446 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2018-11-18 11:48:32,446 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_error [2018-11-18 11:48:32,446 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2018-11-18 11:48:32,446 INFO L130 BoogieDeclarations]: Found specification of procedure test_and_set_bit [2018-11-18 11:48:32,446 INFO L130 BoogieDeclarations]: Found specification of procedure test_and_clear_bit [2018-11-18 11:48:32,446 INFO L130 BoogieDeclarations]: Found specification of procedure __fswab16 [2018-11-18 11:48:32,446 INFO L130 BoogieDeclarations]: Found specification of procedure memcpy [2018-11-18 11:48:32,446 INFO L130 BoogieDeclarations]: Found specification of procedure memcmp [2018-11-18 11:48:32,446 INFO L130 BoogieDeclarations]: Found specification of procedure __raw_spin_lock_init [2018-11-18 11:48:32,446 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2018-11-18 11:48:32,447 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_unlock_irqrestore [2018-11-18 11:48:32,447 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2018-11-18 11:48:32,447 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2018-11-18 11:48:32,447 INFO L130 BoogieDeclarations]: Found specification of procedure del_timer [2018-11-18 11:48:32,447 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_del_timer_16 [2018-11-18 11:48:32,448 INFO L130 BoogieDeclarations]: Found specification of procedure mod_timer [2018-11-18 11:48:32,448 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_mod_timer_14 [2018-11-18 11:48:32,448 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_mod_timer_15 [2018-11-18 11:48:32,448 INFO L130 BoogieDeclarations]: Found specification of procedure add_timer [2018-11-18 11:48:32,448 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2018-11-18 11:48:32,449 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2018-11-18 11:48:32,449 INFO L130 BoogieDeclarations]: Found specification of procedure __kmalloc [2018-11-18 11:48:32,449 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2018-11-18 11:48:32,449 INFO L130 BoogieDeclarations]: Found specification of procedure capable [2018-11-18 11:48:32,449 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kfree_skb_6 [2018-11-18 11:48:32,449 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kfree_skb_7 [2018-11-18 11:48:32,449 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kfree_skb_8 [2018-11-18 11:48:32,449 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kfree_skb_11 [2018-11-18 11:48:32,449 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_consume_skb_5 [2018-11-18 11:48:32,449 INFO L130 BoogieDeclarations]: Found specification of procedure __skb_queue_head_init [2018-11-18 11:48:32,450 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-18 11:48:32,450 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2018-11-18 11:48:32,450 INFO L130 BoogieDeclarations]: Found specification of procedure skb_queue_head_init [2018-11-18 11:48:32,450 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-18 11:48:32,450 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2018-11-18 11:48:32,450 INFO L130 BoogieDeclarations]: Found specification of procedure skb_queue_tail [2018-11-18 11:48:32,450 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_dequeue_12 [2018-11-18 11:48:32,450 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2018-11-18 11:48:32,450 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2018-11-18 11:48:32,451 INFO L130 BoogieDeclarations]: Found specification of procedure skb_pull [2018-11-18 11:48:32,451 INFO L130 BoogieDeclarations]: Found specification of procedure skb_reserve [2018-11-18 11:48:32,451 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-18 11:48:32,451 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2018-11-18 11:48:32,451 INFO L130 BoogieDeclarations]: Found specification of procedure skb_reset_network_header [2018-11-18 11:48:32,452 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_13 [2018-11-18 11:48:32,452 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2018-11-18 11:48:32,452 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_free [2018-11-18 11:48:32,452 INFO L130 BoogieDeclarations]: Found specification of procedure malloc [2018-11-18 11:48:32,452 INFO L130 BoogieDeclarations]: Found specification of procedure calloc [2018-11-18 11:48:32,452 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_int [2018-11-18 11:48:32,452 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_uint [2018-11-18 11:48:32,452 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_ushort [2018-11-18 11:48:32,452 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_ulong [2018-11-18 11:48:32,452 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_pointer [2018-11-18 11:48:32,453 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_assume [2018-11-18 11:48:32,453 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2018-11-18 11:48:32,453 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2018-11-18 11:48:32,453 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2018-11-18 11:48:32,453 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_ptr [2018-11-18 11:48:32,453 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_ulong [2018-11-18 11:48:32,453 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2018-11-18 11:48:32,453 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2018-11-18 11:48:32,453 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_trap [2018-11-18 11:48:32,453 INFO L130 BoogieDeclarations]: Found specification of procedure activate_pending_timer_1 [2018-11-18 11:48:32,454 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize_hdlc_proto_3 [2018-11-18 11:48:32,454 INFO L130 BoogieDeclarations]: Found specification of procedure choose_timer_1 [2018-11-18 11:48:32,454 INFO L130 BoogieDeclarations]: Found specification of procedure reg_timer_1 [2018-11-18 11:48:32,454 INFO L130 BoogieDeclarations]: Found specification of procedure disable_suitable_timer_1 [2018-11-18 11:48:32,454 INFO L130 BoogieDeclarations]: Found specification of procedure netdev_priv [2018-11-18 11:48:32,454 INFO L130 BoogieDeclarations]: Found specification of procedure dev_queue_xmit [2018-11-18 11:48:32,454 INFO L130 BoogieDeclarations]: Found specification of procedure __dev_kfree_skb_any [2018-11-18 11:48:32,454 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2018-11-18 11:48:32,454 INFO L130 BoogieDeclarations]: Found specification of procedure linkwatch_fire_event [2018-11-18 11:48:32,454 INFO L130 BoogieDeclarations]: Found specification of procedure netif_dormant_on [2018-11-18 11:48:32,454 INFO L130 BoogieDeclarations]: Found specification of procedure netif_dormant_off [2018-11-18 11:48:32,455 INFO L130 BoogieDeclarations]: Found specification of procedure netdev_warn [2018-11-18 11:48:32,455 INFO L130 BoogieDeclarations]: Found specification of procedure netdev_info [2018-11-18 11:48:32,455 INFO L130 BoogieDeclarations]: Found specification of procedure register_hdlc_protocol [2018-11-18 11:48:32,455 INFO L130 BoogieDeclarations]: Found specification of procedure unregister_hdlc_protocol [2018-11-18 11:48:32,455 INFO L130 BoogieDeclarations]: Found specification of procedure dev_to_hdlc [2018-11-18 11:48:32,455 INFO L130 BoogieDeclarations]: Found specification of procedure attach_hdlc_protocol [2018-11-18 11:48:32,456 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_ioctl [2018-11-18 11:48:32,456 INFO L130 BoogieDeclarations]: Found specification of procedure get_ppp [2018-11-18 11:48:32,456 INFO L130 BoogieDeclarations]: Found specification of procedure get_proto [2018-11-18 11:48:32,456 INFO L130 BoogieDeclarations]: Found specification of procedure proto_name [2018-11-18 11:48:32,456 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_type_trans [2018-11-18 11:48:32,456 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_hard_header [2018-11-18 11:48:32,456 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_tx_flush [2018-11-18 11:48:32,457 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_tx_cp [2018-11-18 11:48:32,457 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2018-11-18 11:48:32,457 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_cp_event [2018-11-18 11:48:32,457 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_cp_parse_cr [2018-11-18 11:48:32,457 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_rx [2018-11-18 11:48:32,457 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_timer [2018-11-18 11:48:32,457 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_start [2018-11-18 11:48:32,457 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_stop [2018-11-18 11:48:32,457 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_close [2018-11-18 11:48:32,457 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~int~X~int~TO~int [2018-11-18 11:48:32,457 INFO L130 BoogieDeclarations]: Found specification of procedure mod_init [2018-11-18 11:48:32,458 INFO L130 BoogieDeclarations]: Found specification of procedure mod_exit [2018-11-18 11:48:32,458 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_setup_3 [2018-11-18 11:48:32,458 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize [2018-11-18 11:48:32,458 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_final_state [2018-11-18 11:48:32,458 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_release_3 [2018-11-18 11:48:32,458 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_open_3 [2018-11-18 11:48:32,458 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_disconnect_3 [2018-11-18 11:48:32,458 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~int~TO~VOID [2018-11-18 11:48:32,458 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-18 11:48:32,458 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_init [2018-11-18 11:48:32,459 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_add [2018-11-18 11:48:32,459 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_remove [2018-11-18 11:48:32,459 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_contains [2018-11-18 11:48:32,459 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_is_empty [2018-11-18 11:48:32,459 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err [2018-11-18 11:48:32,459 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_err_ptr [2018-11-18 11:48:32,460 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_ptr_err [2018-11-18 11:48:32,460 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err_or_null [2018-11-18 11:48:32,460 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_free_int [2018-11-18 11:48:32,460 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_netdev_alloc_skb [2018-11-18 11:48:32,460 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb [2018-11-18 11:48:32,460 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_current [2018-11-18 11:48:32,461 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-18 11:48:32,461 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2018-11-18 11:48:32,461 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-18 11:48:36,042 INFO L278 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-18 11:48:36,043 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 11:48:36 BoogieIcfgContainer [2018-11-18 11:48:36,043 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-18 11:48:36,043 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-18 11:48:36,043 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-18 11:48:36,045 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-18 11:48:36,045 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 18.11 11:48:30" (1/3) ... [2018-11-18 11:48:36,046 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@42e6fc and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 11:48:36, skipping insertion in model container [2018-11-18 11:48:36,046 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:48:32" (2/3) ... [2018-11-18 11:48:36,046 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@42e6fc and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 11:48:36, skipping insertion in model container [2018-11-18 11:48:36,046 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 11:48:36" (3/3) ... [2018-11-18 11:48:36,048 INFO L112 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_ppp.ko-entry_point_false-unreach-call.cil.out.c [2018-11-18 11:48:36,054 INFO L136 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-18 11:48:36,060 INFO L148 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-18 11:48:36,070 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-18 11:48:36,095 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-18 11:48:36,096 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-18 11:48:36,096 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-18 11:48:36,096 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-18 11:48:36,096 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-18 11:48:36,096 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-18 11:48:36,096 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-18 11:48:36,096 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-18 11:48:36,096 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-18 11:48:36,119 INFO L276 IsEmpty]: Start isEmpty. Operand 643 states. [2018-11-18 11:48:36,128 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2018-11-18 11:48:36,128 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 11:48:36,129 INFO L375 BasicCegarLoop]: trace histogram [5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:48:36,130 INFO L423 AbstractCegarLoop]: === Iteration 1 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 11:48:36,134 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:48:36,134 INFO L82 PathProgramCache]: Analyzing trace with hash 2023518143, now seen corresponding path program 1 times [2018-11-18 11:48:36,135 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:48:36,136 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:48:36,181 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:48:36,181 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:48:36,181 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:48:36,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:48:36,423 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2018-11-18 11:48:36,425 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:48:36,425 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 11:48:36,429 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-18 11:48:36,440 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 11:48:36,441 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 11:48:36,443 INFO L87 Difference]: Start difference. First operand 643 states. Second operand 3 states. [2018-11-18 11:48:38,623 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:48:38,623 INFO L93 Difference]: Finished difference Result 1805 states and 2632 transitions. [2018-11-18 11:48:38,624 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 11:48:38,625 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 65 [2018-11-18 11:48:38,625 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 11:48:38,643 INFO L225 Difference]: With dead ends: 1805 [2018-11-18 11:48:38,643 INFO L226 Difference]: Without dead ends: 1173 [2018-11-18 11:48:38,650 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 11:48:38,663 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1173 states. [2018-11-18 11:48:38,733 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1173 to 1173. [2018-11-18 11:48:38,734 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1173 states. [2018-11-18 11:48:38,740 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1173 states to 1173 states and 1644 transitions. [2018-11-18 11:48:38,741 INFO L78 Accepts]: Start accepts. Automaton has 1173 states and 1644 transitions. Word has length 65 [2018-11-18 11:48:38,742 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 11:48:38,742 INFO L480 AbstractCegarLoop]: Abstraction has 1173 states and 1644 transitions. [2018-11-18 11:48:38,742 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-18 11:48:38,742 INFO L276 IsEmpty]: Start isEmpty. Operand 1173 states and 1644 transitions. [2018-11-18 11:48:38,747 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2018-11-18 11:48:38,747 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 11:48:38,747 INFO L375 BasicCegarLoop]: trace histogram [5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:48:38,748 INFO L423 AbstractCegarLoop]: === Iteration 2 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 11:48:38,748 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:48:38,748 INFO L82 PathProgramCache]: Analyzing trace with hash -907627059, now seen corresponding path program 1 times [2018-11-18 11:48:38,748 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:48:38,748 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:48:38,754 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:48:38,754 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:48:38,754 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:48:38,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:48:38,864 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2018-11-18 11:48:38,864 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:48:38,864 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 11:48:38,866 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-18 11:48:38,866 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 11:48:38,866 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 11:48:38,866 INFO L87 Difference]: Start difference. First operand 1173 states and 1644 transitions. Second operand 5 states. [2018-11-18 11:48:38,947 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:48:38,947 INFO L93 Difference]: Finished difference Result 2321 states and 3257 transitions. [2018-11-18 11:48:38,948 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-18 11:48:38,948 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 82 [2018-11-18 11:48:38,948 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 11:48:38,955 INFO L225 Difference]: With dead ends: 2321 [2018-11-18 11:48:38,955 INFO L226 Difference]: Without dead ends: 1172 [2018-11-18 11:48:38,960 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2018-11-18 11:48:38,961 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1172 states. [2018-11-18 11:48:38,992 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1172 to 1172. [2018-11-18 11:48:38,992 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1172 states. [2018-11-18 11:48:38,997 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1172 states to 1172 states and 1640 transitions. [2018-11-18 11:48:38,997 INFO L78 Accepts]: Start accepts. Automaton has 1172 states and 1640 transitions. Word has length 82 [2018-11-18 11:48:38,998 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 11:48:38,998 INFO L480 AbstractCegarLoop]: Abstraction has 1172 states and 1640 transitions. [2018-11-18 11:48:38,998 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-18 11:48:38,998 INFO L276 IsEmpty]: Start isEmpty. Operand 1172 states and 1640 transitions. [2018-11-18 11:48:39,003 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2018-11-18 11:48:39,003 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 11:48:39,003 INFO L375 BasicCegarLoop]: trace histogram [7, 7, 7, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:48:39,004 INFO L423 AbstractCegarLoop]: === Iteration 3 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 11:48:39,004 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:48:39,004 INFO L82 PathProgramCache]: Analyzing trace with hash 2023439420, now seen corresponding path program 1 times [2018-11-18 11:48:39,004 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:48:39,004 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:48:39,007 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:48:39,007 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:48:39,007 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:48:39,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:48:39,148 INFO L134 CoverageAnalysis]: Checked inductivity of 89 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 84 trivial. 0 not checked. [2018-11-18 11:48:39,149 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-18 11:48:39,149 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8b2289d1-be5f-4a28-8de3-7eeb4da811f6/bin-2019/uautomizer/z3 Starting monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2018-11-18 11:48:39,161 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:48:39,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:48:39,331 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 11:48:39,386 INFO L134 CoverageAnalysis]: Checked inductivity of 89 backedges. 40 proven. 0 refuted. 0 times theorem prover too weak. 49 trivial. 0 not checked. [2018-11-18 11:48:39,403 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 1 imperfect interpolant sequences. [2018-11-18 11:48:39,403 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [7] total 10 [2018-11-18 11:48:39,403 INFO L459 AbstractCegarLoop]: Interpolant automaton has 10 states [2018-11-18 11:48:39,404 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2018-11-18 11:48:39,404 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=68, Unknown=0, NotChecked=0, Total=90 [2018-11-18 11:48:39,404 INFO L87 Difference]: Start difference. First operand 1172 states and 1640 transitions. Second operand 10 states. [2018-11-18 11:48:44,417 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:48:44,417 INFO L93 Difference]: Finished difference Result 3469 states and 5060 transitions. [2018-11-18 11:48:44,418 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2018-11-18 11:48:44,419 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 109 [2018-11-18 11:48:44,419 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 11:48:44,434 INFO L225 Difference]: With dead ends: 3469 [2018-11-18 11:48:44,434 INFO L226 Difference]: Without dead ends: 2308 [2018-11-18 11:48:44,441 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 119 GetRequests, 108 SyntacticMatches, 1 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=100, Unknown=0, NotChecked=0, Total=132 [2018-11-18 11:48:44,442 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2308 states. [2018-11-18 11:48:44,501 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2308 to 2308. [2018-11-18 11:48:44,501 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2308 states. [2018-11-18 11:48:44,511 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2308 states to 2308 states and 3335 transitions. [2018-11-18 11:48:44,511 INFO L78 Accepts]: Start accepts. Automaton has 2308 states and 3335 transitions. Word has length 109 [2018-11-18 11:48:44,511 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 11:48:44,512 INFO L480 AbstractCegarLoop]: Abstraction has 2308 states and 3335 transitions. [2018-11-18 11:48:44,512 INFO L481 AbstractCegarLoop]: Interpolant automaton has 10 states. [2018-11-18 11:48:44,512 INFO L276 IsEmpty]: Start isEmpty. Operand 2308 states and 3335 transitions. [2018-11-18 11:48:44,519 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 158 [2018-11-18 11:48:44,520 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 11:48:44,520 INFO L375 BasicCegarLoop]: trace histogram [8, 8, 8, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:48:44,520 INFO L423 AbstractCegarLoop]: === Iteration 4 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 11:48:44,520 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:48:44,520 INFO L82 PathProgramCache]: Analyzing trace with hash 1932275911, now seen corresponding path program 1 times [2018-11-18 11:48:44,521 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:48:44,521 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:48:44,524 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:48:44,525 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:48:44,525 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:48:44,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:48:44,606 INFO L134 CoverageAnalysis]: Checked inductivity of 123 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 117 trivial. 0 not checked. [2018-11-18 11:48:44,606 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:48:44,607 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 11:48:44,607 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-18 11:48:44,607 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 11:48:44,607 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 11:48:44,607 INFO L87 Difference]: Start difference. First operand 2308 states and 3335 transitions. Second operand 3 states. [2018-11-18 11:48:44,743 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:48:44,743 INFO L93 Difference]: Finished difference Result 4756 states and 6705 transitions. [2018-11-18 11:48:44,744 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 11:48:44,744 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 157 [2018-11-18 11:48:44,744 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 11:48:44,756 INFO L225 Difference]: With dead ends: 4756 [2018-11-18 11:48:44,756 INFO L226 Difference]: Without dead ends: 2472 [2018-11-18 11:48:44,765 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 11:48:44,766 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2472 states. [2018-11-18 11:48:44,829 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2472 to 2452. [2018-11-18 11:48:44,829 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2452 states. [2018-11-18 11:48:44,837 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2452 states to 2452 states and 3376 transitions. [2018-11-18 11:48:44,837 INFO L78 Accepts]: Start accepts. Automaton has 2452 states and 3376 transitions. Word has length 157 [2018-11-18 11:48:44,838 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 11:48:44,838 INFO L480 AbstractCegarLoop]: Abstraction has 2452 states and 3376 transitions. [2018-11-18 11:48:44,838 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-18 11:48:44,838 INFO L276 IsEmpty]: Start isEmpty. Operand 2452 states and 3376 transitions. [2018-11-18 11:48:44,896 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 158 [2018-11-18 11:48:44,896 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 11:48:44,896 INFO L375 BasicCegarLoop]: trace histogram [8, 8, 8, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:48:44,897 INFO L423 AbstractCegarLoop]: === Iteration 5 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 11:48:44,897 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:48:44,897 INFO L82 PathProgramCache]: Analyzing trace with hash -1423079609, now seen corresponding path program 2 times [2018-11-18 11:48:44,897 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:48:44,898 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:48:44,899 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:48:44,899 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:48:44,900 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:48:44,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:48:44,994 INFO L134 CoverageAnalysis]: Checked inductivity of 123 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2018-11-18 11:48:44,995 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:48:44,995 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 11:48:44,996 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-18 11:48:44,996 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 11:48:44,996 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 11:48:44,996 INFO L87 Difference]: Start difference. First operand 2452 states and 3376 transitions. Second operand 3 states. [2018-11-18 11:48:47,235 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:48:47,235 INFO L93 Difference]: Finished difference Result 5334 states and 7433 transitions. [2018-11-18 11:48:47,236 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 11:48:47,236 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 157 [2018-11-18 11:48:47,236 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 11:48:47,257 INFO L225 Difference]: With dead ends: 5334 [2018-11-18 11:48:47,257 INFO L226 Difference]: Without dead ends: 3508 [2018-11-18 11:48:47,268 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 11:48:47,271 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3508 states. [2018-11-18 11:48:47,385 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3508 to 3452. [2018-11-18 11:48:47,385 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3452 states. [2018-11-18 11:48:47,399 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3452 states to 3452 states and 4784 transitions. [2018-11-18 11:48:47,400 INFO L78 Accepts]: Start accepts. Automaton has 3452 states and 4784 transitions. Word has length 157 [2018-11-18 11:48:47,400 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 11:48:47,400 INFO L480 AbstractCegarLoop]: Abstraction has 3452 states and 4784 transitions. [2018-11-18 11:48:47,400 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-18 11:48:47,401 INFO L276 IsEmpty]: Start isEmpty. Operand 3452 states and 4784 transitions. [2018-11-18 11:48:47,410 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 174 [2018-11-18 11:48:47,410 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 11:48:47,410 INFO L375 BasicCegarLoop]: trace histogram [8, 8, 8, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:48:47,411 INFO L423 AbstractCegarLoop]: === Iteration 6 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 11:48:47,411 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:48:47,411 INFO L82 PathProgramCache]: Analyzing trace with hash -1961727444, now seen corresponding path program 1 times [2018-11-18 11:48:47,411 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:48:47,412 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:48:47,414 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:48:47,414 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 11:48:47,414 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:48:47,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:48:47,532 INFO L134 CoverageAnalysis]: Checked inductivity of 140 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 115 trivial. 0 not checked. [2018-11-18 11:48:47,533 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:48:47,533 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 11:48:47,533 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-18 11:48:47,533 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 11:48:47,533 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 11:48:47,534 INFO L87 Difference]: Start difference. First operand 3452 states and 4784 transitions. Second operand 3 states. [2018-11-18 11:48:49,808 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:48:49,808 INFO L93 Difference]: Finished difference Result 7332 states and 10245 transitions. [2018-11-18 11:48:49,809 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 11:48:49,809 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 173 [2018-11-18 11:48:49,809 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 11:48:49,834 INFO L225 Difference]: With dead ends: 7332 [2018-11-18 11:48:49,835 INFO L226 Difference]: Without dead ends: 4506 [2018-11-18 11:48:49,850 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 11:48:49,853 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4506 states. [2018-11-18 11:48:49,990 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4506 to 4450. [2018-11-18 11:48:49,990 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4450 states. [2018-11-18 11:48:50,007 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4450 states to 4450 states and 6190 transitions. [2018-11-18 11:48:50,008 INFO L78 Accepts]: Start accepts. Automaton has 4450 states and 6190 transitions. Word has length 173 [2018-11-18 11:48:50,008 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 11:48:50,009 INFO L480 AbstractCegarLoop]: Abstraction has 4450 states and 6190 transitions. [2018-11-18 11:48:50,009 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-18 11:48:50,009 INFO L276 IsEmpty]: Start isEmpty. Operand 4450 states and 6190 transitions. [2018-11-18 11:48:50,019 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 192 [2018-11-18 11:48:50,019 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 11:48:50,019 INFO L375 BasicCegarLoop]: trace histogram [8, 8, 8, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:48:50,019 INFO L423 AbstractCegarLoop]: === Iteration 7 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 11:48:50,019 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:48:50,020 INFO L82 PathProgramCache]: Analyzing trace with hash -1930581250, now seen corresponding path program 1 times [2018-11-18 11:48:50,020 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:48:50,020 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:48:50,022 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:48:50,022 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:48:50,022 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:48:50,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:48:50,173 INFO L134 CoverageAnalysis]: Checked inductivity of 126 backedges. 22 proven. 0 refuted. 0 times theorem prover too weak. 104 trivial. 0 not checked. [2018-11-18 11:48:50,174 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:48:50,174 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 11:48:50,174 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-18 11:48:50,174 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 11:48:50,174 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 11:48:50,175 INFO L87 Difference]: Start difference. First operand 4450 states and 6190 transitions. Second operand 5 states. [2018-11-18 11:48:50,340 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:48:50,340 INFO L93 Difference]: Finished difference Result 8936 states and 12944 transitions. [2018-11-18 11:48:50,341 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-18 11:48:50,341 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 191 [2018-11-18 11:48:50,341 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 11:48:50,369 INFO L225 Difference]: With dead ends: 8936 [2018-11-18 11:48:50,369 INFO L226 Difference]: Without dead ends: 4510 [2018-11-18 11:48:50,396 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 11:48:50,399 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4510 states. [2018-11-18 11:48:50,571 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4510 to 4500. [2018-11-18 11:48:50,572 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4500 states. [2018-11-18 11:48:50,596 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4500 states to 4500 states and 6254 transitions. [2018-11-18 11:48:50,598 INFO L78 Accepts]: Start accepts. Automaton has 4500 states and 6254 transitions. Word has length 191 [2018-11-18 11:48:50,598 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 11:48:50,599 INFO L480 AbstractCegarLoop]: Abstraction has 4500 states and 6254 transitions. [2018-11-18 11:48:50,599 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-18 11:48:50,599 INFO L276 IsEmpty]: Start isEmpty. Operand 4500 states and 6254 transitions. [2018-11-18 11:48:50,613 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 197 [2018-11-18 11:48:50,614 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 11:48:50,614 INFO L375 BasicCegarLoop]: trace histogram [8, 8, 7, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:48:50,614 INFO L423 AbstractCegarLoop]: === Iteration 8 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 11:48:50,614 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:48:50,615 INFO L82 PathProgramCache]: Analyzing trace with hash -968855249, now seen corresponding path program 1 times [2018-11-18 11:48:50,615 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:48:50,615 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:48:50,617 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:48:50,618 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:48:50,618 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:48:50,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:48:51,071 INFO L134 CoverageAnalysis]: Checked inductivity of 126 backedges. 22 proven. 0 refuted. 0 times theorem prover too weak. 104 trivial. 0 not checked. [2018-11-18 11:48:51,071 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:48:51,071 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2018-11-18 11:48:51,072 INFO L459 AbstractCegarLoop]: Interpolant automaton has 11 states [2018-11-18 11:48:51,072 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2018-11-18 11:48:51,072 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=91, Unknown=0, NotChecked=0, Total=110 [2018-11-18 11:48:51,072 INFO L87 Difference]: Start difference. First operand 4500 states and 6254 transitions. Second operand 11 states. [2018-11-18 11:48:51,409 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:48:51,409 INFO L93 Difference]: Finished difference Result 9076 states and 13067 transitions. [2018-11-18 11:48:51,410 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-11-18 11:48:51,410 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 196 [2018-11-18 11:48:51,410 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 11:48:51,437 INFO L225 Difference]: With dead ends: 9076 [2018-11-18 11:48:51,437 INFO L226 Difference]: Without dead ends: 4600 [2018-11-18 11:48:51,456 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=31, Invalid=151, Unknown=0, NotChecked=0, Total=182 [2018-11-18 11:48:51,460 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4600 states. [2018-11-18 11:48:51,599 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4600 to 4560. [2018-11-18 11:48:51,599 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4560 states. [2018-11-18 11:48:51,616 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4560 states to 4560 states and 6309 transitions. [2018-11-18 11:48:51,617 INFO L78 Accepts]: Start accepts. Automaton has 4560 states and 6309 transitions. Word has length 196 [2018-11-18 11:48:51,618 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 11:48:51,618 INFO L480 AbstractCegarLoop]: Abstraction has 4560 states and 6309 transitions. [2018-11-18 11:48:51,618 INFO L481 AbstractCegarLoop]: Interpolant automaton has 11 states. [2018-11-18 11:48:51,618 INFO L276 IsEmpty]: Start isEmpty. Operand 4560 states and 6309 transitions. [2018-11-18 11:48:51,633 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 220 [2018-11-18 11:48:51,634 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 11:48:51,634 INFO L375 BasicCegarLoop]: trace histogram [9, 9, 8, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:48:51,634 INFO L423 AbstractCegarLoop]: === Iteration 9 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 11:48:51,634 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:48:51,634 INFO L82 PathProgramCache]: Analyzing trace with hash -980212592, now seen corresponding path program 1 times [2018-11-18 11:48:51,634 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:48:51,635 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:48:51,637 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:48:51,637 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:48:51,637 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:48:51,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:48:51,768 INFO L134 CoverageAnalysis]: Checked inductivity of 162 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 155 trivial. 0 not checked. [2018-11-18 11:48:51,769 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:48:51,769 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 11:48:51,769 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-18 11:48:51,769 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 11:48:51,769 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 11:48:51,770 INFO L87 Difference]: Start difference. First operand 4560 states and 6309 transitions. Second operand 3 states. [2018-11-18 11:48:51,942 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:48:51,942 INFO L93 Difference]: Finished difference Result 9196 states and 12789 transitions. [2018-11-18 11:48:51,943 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 11:48:51,943 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 219 [2018-11-18 11:48:51,943 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 11:48:51,971 INFO L225 Difference]: With dead ends: 9196 [2018-11-18 11:48:51,971 INFO L226 Difference]: Without dead ends: 4660 [2018-11-18 11:48:51,987 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 11:48:51,992 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4660 states. [2018-11-18 11:48:52,163 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4660 to 4620. [2018-11-18 11:48:52,164 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4620 states. [2018-11-18 11:48:52,183 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4620 states to 4620 states and 6369 transitions. [2018-11-18 11:48:52,185 INFO L78 Accepts]: Start accepts. Automaton has 4620 states and 6369 transitions. Word has length 219 [2018-11-18 11:48:52,185 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 11:48:52,185 INFO L480 AbstractCegarLoop]: Abstraction has 4620 states and 6369 transitions. [2018-11-18 11:48:52,185 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-18 11:48:52,185 INFO L276 IsEmpty]: Start isEmpty. Operand 4620 states and 6369 transitions. [2018-11-18 11:48:52,202 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 216 [2018-11-18 11:48:52,202 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 11:48:52,202 INFO L375 BasicCegarLoop]: trace histogram [9, 9, 8, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:48:52,202 INFO L423 AbstractCegarLoop]: === Iteration 10 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 11:48:52,202 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:48:52,203 INFO L82 PathProgramCache]: Analyzing trace with hash 759589842, now seen corresponding path program 1 times [2018-11-18 11:48:52,203 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:48:52,203 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:48:52,205 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:48:52,205 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:48:52,205 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:48:52,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-18 11:48:52,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-18 11:48:52,566 INFO L442 BasicCegarLoop]: Counterexample might be feasible [2018-11-18 11:48:52,697 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 4119 could not be translated for associated CType ARRAY#_15_~~Element~0# [2018-11-18 11:48:52,698 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 4162 could not be translated for associated CType ARRAY#_15_~~Element~0# [2018-11-18 11:48:52,698 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 4151 could not be translated for associated CType STRUCT~~sk_buff_head?next~*sk_buff?prev~*sk_buff?qlen~~__u32~0?lock~~spinlock_t~0# [2018-11-18 11:48:52,699 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 4126 could not be translated for associated CType STRUCT~~header_ops?create~*((*sk_buff *net_device USHORT *VOID *VOID UINT ) : INT)?parse~*((*sk_buff *UCHAR ) : INT)?rebuild~*((*sk_buff ) : INT)?cache~*((*neighbour *hh_cache ~__be16~0 ) : INT)?cache_update~*((*hh_cache *net_device *UCHAR ) : VOID)# [2018-11-18 11:48:52,699 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 4145 could not be translated for associated CType STRUCT~~hdlc_proto?open~*((*net_device ) : INT)?close~*((*net_device ) : VOID)?start~*((*net_device ) : VOID)?stop~*((*net_device ) : VOID)?detach~*((*net_device ) : VOID)?ioctl~*((*net_device *ifreq ) : INT)?type_trans~*((*sk_buff *net_device ) : ~__be16~0)?netif_rx~*((*sk_buff ) : INT)?xmit~*((*sk_buff *net_device ) : ~netdev_tx_t~0)?module~*module?next~*hdlc_proto# [2018-11-18 11:48:52,699 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 4122 could not be translated for associated CType STRUCT~~header_ops?create~*((*sk_buff *net_device USHORT *VOID *VOID UINT ) : INT)?parse~*((*sk_buff *UCHAR ) : INT)?rebuild~*((*sk_buff ) : INT)?cache~*((*neighbour *hh_cache ~__be16~0 ) : INT)?cache_update~*((*hh_cache *net_device *UCHAR ) : VOID)# [2018-11-18 11:48:52,699 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 4114 could not be translated for associated CType STRUCT~~sk_buff_head?next~*sk_buff?prev~*sk_buff?qlen~~__u32~0?lock~~spinlock_t~0# [2018-11-18 11:48:52,699 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 4134 could not be translated for associated CType ARRAY#_13_~ARRAY#_7_~INT## [2018-11-18 11:48:52,700 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 4115 could not be translated for associated CType ARRAY#_13_~ARRAY#_7_~INT## [2018-11-18 11:48:52,700 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 4131 could not be translated for associated CType STRUCT~~hdlc_proto?open~*((*net_device ) : INT)?close~*((*net_device ) : VOID)?start~*((*net_device ) : VOID)?stop~*((*net_device ) : VOID)?detach~*((*net_device ) : VOID)?ioctl~*((*net_device *ifreq ) : INT)?type_trans~*((*sk_buff *net_device ) : ~__be16~0)?netif_rx~*((*sk_buff ) : INT)?xmit~*((*sk_buff *net_device ) : ~netdev_tx_t~0)?module~*module?next~*hdlc_proto# [2018-11-18 11:48:52,722 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,723 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,723 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,725 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,725 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,731 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,731 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,732 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,732 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,735 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,735 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,736 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,736 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,737 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,737 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,738 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,738 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,738 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,739 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,739 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,739 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,740 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,740 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,740 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,756 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,757 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,757 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,757 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,758 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,758 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,758 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,759 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,759 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,759 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,759 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,760 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,760 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,760 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,761 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,761 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,761 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,762 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,762 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,762 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,763 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,763 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,763 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,764 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,765 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,765 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,765 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,766 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,766 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,766 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,794 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 18.11 11:48:52 BoogieIcfgContainer [2018-11-18 11:48:52,794 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2018-11-18 11:48:52,795 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-18 11:48:52,795 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-18 11:48:52,795 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-18 11:48:52,795 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 11:48:36" (3/4) ... [2018-11-18 11:48:52,797 INFO L138 WitnessPrinter]: Generating witness for reachability counterexample [2018-11-18 11:48:52,829 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 4114 could not be translated for associated CType STRUCT~~sk_buff_head?next~*sk_buff?prev~*sk_buff?qlen~~__u32~0?lock~~spinlock_t~0# [2018-11-18 11:48:52,830 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 4115 could not be translated for associated CType ARRAY#_13_~ARRAY#_7_~INT## [2018-11-18 11:48:52,830 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 4122 could not be translated for associated CType STRUCT~~header_ops?create~*((*sk_buff *net_device USHORT *VOID *VOID UINT ) : INT)?parse~*((*sk_buff *UCHAR ) : INT)?rebuild~*((*sk_buff ) : INT)?cache~*((*neighbour *hh_cache ~__be16~0 ) : INT)?cache_update~*((*hh_cache *net_device *UCHAR ) : VOID)# [2018-11-18 11:48:52,830 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 4134 could not be translated for associated CType ARRAY#_13_~ARRAY#_7_~INT## [2018-11-18 11:48:52,830 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 4145 could not be translated for associated CType STRUCT~~hdlc_proto?open~*((*net_device ) : INT)?close~*((*net_device ) : VOID)?start~*((*net_device ) : VOID)?stop~*((*net_device ) : VOID)?detach~*((*net_device ) : VOID)?ioctl~*((*net_device *ifreq ) : INT)?type_trans~*((*sk_buff *net_device ) : ~__be16~0)?netif_rx~*((*sk_buff ) : INT)?xmit~*((*sk_buff *net_device ) : ~netdev_tx_t~0)?module~*module?next~*hdlc_proto# [2018-11-18 11:48:52,830 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 4131 could not be translated for associated CType STRUCT~~hdlc_proto?open~*((*net_device ) : INT)?close~*((*net_device ) : VOID)?start~*((*net_device ) : VOID)?stop~*((*net_device ) : VOID)?detach~*((*net_device ) : VOID)?ioctl~*((*net_device *ifreq ) : INT)?type_trans~*((*sk_buff *net_device ) : ~__be16~0)?netif_rx~*((*sk_buff ) : INT)?xmit~*((*sk_buff *net_device ) : ~netdev_tx_t~0)?module~*module?next~*hdlc_proto# [2018-11-18 11:48:52,830 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 4126 could not be translated for associated CType STRUCT~~header_ops?create~*((*sk_buff *net_device USHORT *VOID *VOID UINT ) : INT)?parse~*((*sk_buff *UCHAR ) : INT)?rebuild~*((*sk_buff ) : INT)?cache~*((*neighbour *hh_cache ~__be16~0 ) : INT)?cache_update~*((*hh_cache *net_device *UCHAR ) : VOID)# [2018-11-18 11:48:52,831 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 4119 could not be translated for associated CType ARRAY#_15_~~Element~0# [2018-11-18 11:48:52,831 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 4162 could not be translated for associated CType ARRAY#_15_~~Element~0# [2018-11-18 11:48:52,831 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 4151 could not be translated for associated CType STRUCT~~sk_buff_head?next~*sk_buff?prev~*sk_buff?qlen~~__u32~0?lock~~spinlock_t~0# [2018-11-18 11:48:52,840 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,840 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,840 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,841 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,841 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,846 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,846 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,847 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,847 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,850 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,850 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,850 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,851 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,851 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,851 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,852 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,852 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,852 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,853 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,853 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,853 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,854 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,854 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,854 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,871 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,871 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,871 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,872 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,872 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,872 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,873 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,873 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,873 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,874 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,874 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,874 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,875 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,875 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,875 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,876 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,876 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,876 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,877 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,877 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,877 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,878 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,878 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,878 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,881 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,882 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,882 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,882 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,883 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,883 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 11:48:52,952 INFO L145 WitnessManager]: Wrote witness to /tmp/vcloud-vcloud-master/worker/working_dir_8b2289d1-be5f-4a28-8de3-7eeb4da811f6/bin-2019/uautomizer/witness.graphml [2018-11-18 11:48:52,953 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-18 11:48:52,953 INFO L168 Benchmark]: Toolchain (without parser) took 22346.12 ms. Allocated memory was 1.0 GB in the beginning and 1.7 GB in the end (delta: 645.9 MB). Free memory was 950.1 MB in the beginning and 1.4 GB in the end (delta: -452.1 MB). Peak memory consumption was 193.8 MB. Max. memory is 11.5 GB. [2018-11-18 11:48:52,954 INFO L168 Benchmark]: CDTParser took 0.11 ms. Allocated memory is still 1.0 GB. Free memory is still 982.9 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-18 11:48:52,954 INFO L168 Benchmark]: CACSL2BoogieTranslator took 1658.73 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 198.2 MB). Free memory was 950.1 MB in the beginning and 897.4 MB in the end (delta: 52.7 MB). Peak memory consumption was 311.5 MB. Max. memory is 11.5 GB. [2018-11-18 11:48:52,954 INFO L168 Benchmark]: Boogie Preprocessor took 115.26 ms. Allocated memory is still 1.2 GB. Free memory was 897.4 MB in the beginning and 887.4 MB in the end (delta: 10.0 MB). Peak memory consumption was 10.0 MB. Max. memory is 11.5 GB. [2018-11-18 11:48:52,954 INFO L168 Benchmark]: RCFGBuilder took 3660.11 ms. Allocated memory was 1.2 GB in the beginning and 1.4 GB in the end (delta: 122.7 MB). Free memory was 887.4 MB in the beginning and 1.1 GB in the end (delta: -163.7 MB). Peak memory consumption was 46.8 MB. Max. memory is 11.5 GB. [2018-11-18 11:48:52,955 INFO L168 Benchmark]: TraceAbstraction took 16751.15 ms. Allocated memory was 1.4 GB in the beginning and 1.7 GB in the end (delta: 325.1 MB). Free memory was 1.1 GB in the beginning and 1.5 GB in the end (delta: -442.9 MB). Peak memory consumption was 473.4 MB. Max. memory is 11.5 GB. [2018-11-18 11:48:52,955 INFO L168 Benchmark]: Witness Printer took 158.08 ms. Allocated memory is still 1.7 GB. Free memory was 1.5 GB in the beginning and 1.4 GB in the end (delta: 91.8 MB). Peak memory consumption was 91.8 MB. Max. memory is 11.5 GB. [2018-11-18 11:48:52,956 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.11 ms. Allocated memory is still 1.0 GB. Free memory is still 982.9 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 1658.73 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 198.2 MB). Free memory was 950.1 MB in the beginning and 897.4 MB in the end (delta: 52.7 MB). Peak memory consumption was 311.5 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 115.26 ms. Allocated memory is still 1.2 GB. Free memory was 897.4 MB in the beginning and 887.4 MB in the end (delta: 10.0 MB). Peak memory consumption was 10.0 MB. Max. memory is 11.5 GB. * RCFGBuilder took 3660.11 ms. Allocated memory was 1.2 GB in the beginning and 1.4 GB in the end (delta: 122.7 MB). Free memory was 887.4 MB in the beginning and 1.1 GB in the end (delta: -163.7 MB). Peak memory consumption was 46.8 MB. Max. memory is 11.5 GB. * TraceAbstraction took 16751.15 ms. Allocated memory was 1.4 GB in the beginning and 1.7 GB in the end (delta: 325.1 MB). Free memory was 1.1 GB in the beginning and 1.5 GB in the end (delta: -442.9 MB). Peak memory consumption was 473.4 MB. Max. memory is 11.5 GB. * Witness Printer took 158.08 ms. Allocated memory is still 1.7 GB. Free memory was 1.5 GB in the beginning and 1.4 GB in the end (delta: 91.8 MB). Peak memory consumption was 91.8 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 4119 could not be translated for associated CType ARRAY#_15_~~Element~0# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 4162 could not be translated for associated CType ARRAY#_15_~~Element~0# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 4151 could not be translated for associated CType STRUCT~~sk_buff_head?next~*sk_buff?prev~*sk_buff?qlen~~__u32~0?lock~~spinlock_t~0# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 4126 could not be translated for associated CType STRUCT~~header_ops?create~*((*sk_buff *net_device USHORT *VOID *VOID UINT ) : INT)?parse~*((*sk_buff *UCHAR ) : INT)?rebuild~*((*sk_buff ) : INT)?cache~*((*neighbour *hh_cache ~__be16~0 ) : INT)?cache_update~*((*hh_cache *net_device *UCHAR ) : VOID)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 4145 could not be translated for associated CType STRUCT~~hdlc_proto?open~*((*net_device ) : INT)?close~*((*net_device ) : VOID)?start~*((*net_device ) : VOID)?stop~*((*net_device ) : VOID)?detach~*((*net_device ) : VOID)?ioctl~*((*net_device *ifreq ) : INT)?type_trans~*((*sk_buff *net_device ) : ~__be16~0)?netif_rx~*((*sk_buff ) : INT)?xmit~*((*sk_buff *net_device ) : ~netdev_tx_t~0)?module~*module?next~*hdlc_proto# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 4122 could not be translated for associated CType STRUCT~~header_ops?create~*((*sk_buff *net_device USHORT *VOID *VOID UINT ) : INT)?parse~*((*sk_buff *UCHAR ) : INT)?rebuild~*((*sk_buff ) : INT)?cache~*((*neighbour *hh_cache ~__be16~0 ) : INT)?cache_update~*((*hh_cache *net_device *UCHAR ) : VOID)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 4114 could not be translated for associated CType STRUCT~~sk_buff_head?next~*sk_buff?prev~*sk_buff?qlen~~__u32~0?lock~~spinlock_t~0# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 4134 could not be translated for associated CType ARRAY#_13_~ARRAY#_7_~INT## - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 4115 could not be translated for associated CType ARRAY#_13_~ARRAY#_7_~INT## - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 4131 could not be translated for associated CType STRUCT~~hdlc_proto?open~*((*net_device ) : INT)?close~*((*net_device ) : VOID)?start~*((*net_device ) : VOID)?stop~*((*net_device ) : VOID)?detach~*((*net_device ) : VOID)?ioctl~*((*net_device *ifreq ) : INT)?type_trans~*((*sk_buff *net_device ) : ~__be16~0)?netif_rx~*((*sk_buff ) : INT)?xmit~*((*sk_buff *net_device ) : ~netdev_tx_t~0)?module~*module?next~*hdlc_proto# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 4114 could not be translated for associated CType STRUCT~~sk_buff_head?next~*sk_buff?prev~*sk_buff?qlen~~__u32~0?lock~~spinlock_t~0# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 4115 could not be translated for associated CType ARRAY#_13_~ARRAY#_7_~INT## - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 4122 could not be translated for associated CType STRUCT~~header_ops?create~*((*sk_buff *net_device USHORT *VOID *VOID UINT ) : INT)?parse~*((*sk_buff *UCHAR ) : INT)?rebuild~*((*sk_buff ) : INT)?cache~*((*neighbour *hh_cache ~__be16~0 ) : INT)?cache_update~*((*hh_cache *net_device *UCHAR ) : VOID)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 4134 could not be translated for associated CType ARRAY#_13_~ARRAY#_7_~INT## - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 4145 could not be translated for associated CType STRUCT~~hdlc_proto?open~*((*net_device ) : INT)?close~*((*net_device ) : VOID)?start~*((*net_device ) : VOID)?stop~*((*net_device ) : VOID)?detach~*((*net_device ) : VOID)?ioctl~*((*net_device *ifreq ) : INT)?type_trans~*((*sk_buff *net_device ) : ~__be16~0)?netif_rx~*((*sk_buff ) : INT)?xmit~*((*sk_buff *net_device ) : ~netdev_tx_t~0)?module~*module?next~*hdlc_proto# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 4131 could not be translated for associated CType STRUCT~~hdlc_proto?open~*((*net_device ) : INT)?close~*((*net_device ) : VOID)?start~*((*net_device ) : VOID)?stop~*((*net_device ) : VOID)?detach~*((*net_device ) : VOID)?ioctl~*((*net_device *ifreq ) : INT)?type_trans~*((*sk_buff *net_device ) : ~__be16~0)?netif_rx~*((*sk_buff ) : INT)?xmit~*((*sk_buff *net_device ) : ~netdev_tx_t~0)?module~*module?next~*hdlc_proto# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 4126 could not be translated for associated CType STRUCT~~header_ops?create~*((*sk_buff *net_device USHORT *VOID *VOID UINT ) : INT)?parse~*((*sk_buff *UCHAR ) : INT)?rebuild~*((*sk_buff ) : INT)?cache~*((*neighbour *hh_cache ~__be16~0 ) : INT)?cache_update~*((*hh_cache *net_device *UCHAR ) : VOID)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 4119 could not be translated for associated CType ARRAY#_15_~~Element~0# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 4162 could not be translated for associated CType ARRAY#_15_~~Element~0# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 4151 could not be translated for associated CType STRUCT~~sk_buff_head?next~*sk_buff?prev~*sk_buff?qlen~~__u32~0?lock~~spinlock_t~0# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch258 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - CounterExampleResult [Line: 5304]: a call of __VERIFIER_error() is reachable a call of __VERIFIER_error() is reachable We found a FailurePath: [L5195] EXPR, FCALL "&(&list->lock)->rlock" [L5448] FCALL "LCP" [L5450] FCALL "IPCP" [L5452] FCALL "IPV6CP" [L5561] FCALL "out of memory in ppp_tx_cp()\n" [L5719] FCALL "%s up\n" [L5736] FCALL "%s down\n" [L6035] FCALL "Link down\n" [L6163] FCALL "&(&ppp->lock)->rlock" [L5333] int LDV_IN_INTERRUPT = 1; [L5335] int ldv_state_variable_0 ; [L5336] int ldv_state_variable_3 ; [L5337] int ldv_timer_state_1 = 0; [L5338] int ldv_state_variable_2 ; [L5340] int ref_cnt ; [L5341] int ldv_state_variable_1 ; [L5595-L5621] FCALL static int cp_table[13U][7U] = { { 163, 16, 16, 16, 16, 16, 16}, { 16, 0, 0, 0, 0, 0, 0}, { 16, 16, 1026, 131, 131, 133, 16}, { 16, 16, 1, 1, 1, 1, 16}, { 2048, 421, 2, 261, 262, 261, 389}, { 2048, 675, 2, 515, 516, 515, 643}, { 2048, 2049, 2, 36, 131, 6, 131}, { 2048, 2049, 2, 163, 131, 165, 131}, { 2048, 2049, 2050, 2051, 2051, 2051, 2114}, { 0, 1, 1, 3, 3, 5, 131}, { 4096, 4097, 4098, 4099, 4100, 4101, 4102}, { 0, 1, 2, 3, 3, 5, 6}, { 0, 1, 1, 1, 1, 1, 1058}}; [L6197] int ldv_retval_0 ; [L6679] int last_index = 0; [L5334] struct net_device *proto_group1 ; [L5339] struct sk_buff *proto_group0 ; [L5342] struct timer_list *ldv_timer_list_1 ; [L5410] FCALL static struct sk_buff_head tx_queue ; [L6104-L6106] FCALL static struct hdlc_proto proto = {0, & ppp_close, & ppp_start, & ppp_stop, 0, & ppp_ioctl, & ppp_type_trans, & ppp_rx, 0, & __this_module, 0}; [L6107] FCALL static struct header_ops const ppp_header_ops = {& ppp_hard_header, 0, 0, 0, 0}; [L6678] FCALL Element set_impl[15] ; [L6836] Set LDV_SKBS ; VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old("%s down\n")=4106, \old("%s down\n")=4137, \old("%s up\n")=4153, \old("%s up\n")=4130, \old("&(&list->lock)->rlock")=4170, \old("&(&list->lock)->rlock")=4136, \old("&(&ppp->lock)->rlock")=4132, \old("&(&ppp->lock)->rlock")=4112, \old("IPCP")=4173, \old("IPCP")=4146, \old("IPV6CP")=4103, \old("IPV6CP")=4143, \old("LCP")=4148, \old("LCP")=4166, \old("Link down\n")=4108, \old("Link down\n")=4159, \old("out of memory in ppp_tx_cp()\n")=4109, \old("out of memory in ppp_tx_cp()\n")=4150, \old(cp_table)=null, \old(cp_table)=null, \old(last_index)=4152, \old(LDV_IN_INTERRUPT)=4117, \old(ldv_retval_0)=4113, \old(LDV_SKBS)=4121, \old(LDV_SKBS)=4104, \old(ldv_state_variable_0)=4125, \old(ldv_state_variable_1)=4154, \old(ldv_state_variable_2)=4142, \old(ldv_state_variable_3)=4172, \old(ldv_timer_list_1)=4164, \old(ldv_timer_list_1)=4163, \old(ldv_timer_state_1)=4171, \old(ppp_header_ops)=null, \old(ppp_header_ops)=null, \old(proto)=null, \old(proto)=null, \old(proto_group0)=4135, \old(proto_group0)=4138, \old(proto_group1)=4118, \old(proto_group1)=4128, \old(ref_cnt)=4140, \old(set_impl)=null, \old(set_impl)=null, \old(tx_queue)=null, \old(tx_queue)=null, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L6277] struct ifreq *ldvarg0 ; [L6278] void *tmp ; [L6279] unsigned int ldvarg1 ; [L6280] unsigned int tmp___0 ; [L6281] unsigned short ldvarg4 ; [L6282] unsigned short tmp___1 ; [L6283] struct sk_buff *ldvarg3 ; [L6284] void *tmp___2 ; [L6285] struct net_device *ldvarg5 ; [L6286] void *tmp___3 ; [L6287] void *ldvarg2 ; [L6288] void *tmp___4 ; [L6289] void *ldvarg6 ; [L6290] void *tmp___5 ; [L6291] int tmp___6 ; [L6292] int tmp___7 ; [L6293] int tmp___8 ; [L6294] int tmp___9 ; VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L6297] CALL, EXPR ldv_zalloc(40UL) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=40, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L5255] void *p ; [L5256] void *tmp ; [L5257] int tmp___0 ; [L5260] tmp___0 = __VERIFIER_nondet_int() [L5261] COND TRUE tmp___0 != 0 [L5262] RET return ((void *)0); VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=40, \result={0:0}, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, size=40, tmp___0=1, tx_queue={4139:0}] [L6297] EXPR ldv_zalloc(40UL) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(40UL)={0:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L6297] tmp = ldv_zalloc(40UL) [L6298] ldvarg0 = (struct ifreq *)tmp [L6299] tmp___0 = __VERIFIER_nondet_uint() [L6300] ldvarg1 = tmp___0 [L6301] tmp___1 = __VERIFIER_nondet_ushort() [L6302] ldvarg4 = tmp___1 VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4167, ldvarg4=4168, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tmp___0=4167, tmp___1=4168, tx_queue={4139:0}] [L6303] CALL, EXPR ldv_zalloc(232UL) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=232, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L5255] void *p ; [L5256] void *tmp ; [L5257] int tmp___0 ; [L5260] tmp___0 = __VERIFIER_nondet_int() [L5261] COND TRUE tmp___0 != 0 [L5262] RET return ((void *)0); VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=232, \result={0:0}, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, size=232, tmp___0=1, tx_queue={4139:0}] [L6303] EXPR ldv_zalloc(232UL) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(232UL)={0:0}, ldvarg0={0:0}, ldvarg1=4167, ldvarg4=4168, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tmp___0=4167, tmp___1=4168, tx_queue={4139:0}] [L6303] tmp___2 = ldv_zalloc(232UL) [L6304] ldvarg3 = (struct sk_buff *)tmp___2 VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4167, ldvarg3={0:0}, ldvarg4=4168, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tmp___0=4167, tmp___1=4168, tmp___2={0:0}, tx_queue={4139:0}] [L6305] CALL, EXPR ldv_zalloc(3264UL) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=3264, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L5255] void *p ; [L5256] void *tmp ; [L5257] int tmp___0 ; [L5260] tmp___0 = __VERIFIER_nondet_int() [L5261] COND TRUE tmp___0 != 0 [L5262] RET return ((void *)0); VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=3264, \result={0:0}, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, size=3264, tmp___0=1, tx_queue={4139:0}] [L6305] EXPR ldv_zalloc(3264UL) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(3264UL)={0:0}, ldvarg0={0:0}, ldvarg1=4167, ldvarg3={0:0}, ldvarg4=4168, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tmp___0=4167, tmp___1=4168, tmp___2={0:0}, tx_queue={4139:0}] [L6305] tmp___3 = ldv_zalloc(3264UL) [L6306] ldvarg5 = (struct net_device *)tmp___3 VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4167, ldvarg3={0:0}, ldvarg4=4168, ldvarg5={0:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tmp___0=4167, tmp___1=4168, tmp___2={0:0}, tmp___3={0:0}, tx_queue={4139:0}] [L6307] CALL, EXPR ldv_zalloc(1UL) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=1, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L5255] void *p ; [L5256] void *tmp ; [L5257] int tmp___0 ; [L5260] tmp___0 = __VERIFIER_nondet_int() [L5261] COND TRUE tmp___0 != 0 [L5262] RET return ((void *)0); VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=1, \result={0:0}, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, size=1, tmp___0=1, tx_queue={4139:0}] [L6307] EXPR ldv_zalloc(1UL) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=4167, ldvarg3={0:0}, ldvarg4=4168, ldvarg5={0:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tmp___0=4167, tmp___1=4168, tmp___2={0:0}, tmp___3={0:0}, tx_queue={4139:0}] [L6307] tmp___4 = ldv_zalloc(1UL) [L6308] ldvarg2 = tmp___4 VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4167, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=4168, ldvarg5={0:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tmp___0=4167, tmp___1=4168, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tx_queue={4139:0}] [L6309] CALL, EXPR ldv_zalloc(1UL) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=1, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L5255] void *p ; [L5256] void *tmp ; [L5257] int tmp___0 ; [L5260] tmp___0 = __VERIFIER_nondet_int() [L5261] COND TRUE tmp___0 != 0 [L5262] RET return ((void *)0); VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=1, \result={0:0}, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, size=1, tmp___0=1, tx_queue={4139:0}] [L6309] EXPR ldv_zalloc(1UL) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=4167, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=4168, ldvarg5={0:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tmp___0=4167, tmp___1=4168, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tx_queue={4139:0}] [L6309] tmp___5 = ldv_zalloc(1UL) [L6310] ldvarg6 = tmp___5 VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4167, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=4168, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tmp___0=4167, tmp___1=4168, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tx_queue={4139:0}] [L6311] CALL ldv_initialize() VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L6858] CALL ldv_set_init(LDV_SKBS) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set_impl={4149:0}, tx_queue={4139:0}] [L6686] set = set_impl [L6687] RET last_index = 0 VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={4149:0}, set={0:0}, set_impl={4149:0}, tx_queue={4139:0}] [L6858] RET ldv_set_init(LDV_SKBS) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L6311] ldv_initialize() VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4167, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=4168, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tmp___0=4167, tmp___1=4168, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tx_queue={4139:0}] [L6312] ldv_state_variable_1 = 1 [L6313] ref_cnt = 0 [L6314] ldv_state_variable_0 = 1 [L6315] ldv_state_variable_3 = 0 [L6316] ldv_state_variable_2 = 0 VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4167, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=4168, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tmp___0=4167, tmp___1=4168, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tx_queue={4139:0}] [L6318] tmp___6 = __VERIFIER_nondet_int() [L6320] case 0: [L6327] case 1: VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4167, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=4168, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tmp___0=4167, tmp___1=4168, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tx_queue={4139:0}] [L6328] COND TRUE ldv_state_variable_0 != 0 [L6329] tmp___7 = __VERIFIER_nondet_int() [L6331] case 0: [L6340] case 1: VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4167, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=4168, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tmp___0=4167, tmp___1=4168, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=1, tx_queue={4139:0}] [L6341] COND TRUE ldv_state_variable_0 == 1 VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4167, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=4168, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tmp___0=4167, tmp___1=4168, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=1, tx_queue={4139:0}] [L6342] CALL, EXPR mod_init() VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L6183] CALL skb_queue_head_init(& tx_queue) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, list={4139:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L5191] FCALL struct lock_class_key __key ; VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __key={4161:0}, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, list={4139:0}, list={4139:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L5194] CALL spinlock_check(& list->lock) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, lock={4139:20}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L5137] RET return (& lock->ldv_6338.rlock); VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \result={4139:20}, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, lock={4139:20}, lock={4139:20}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L5194] spinlock_check(& list->lock) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __key={4161:0}, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, list={4139:0}, list={4139:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, spinlock_check(& list->lock)={4139:20}, tx_queue={4139:0}] [L5195] FCALL __raw_spin_lock_init(& list->lock.ldv_6338.rlock, "&(&list->lock)->rlock", & __key) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __key={4161:0}, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, list={4139:0}, list={4139:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L5196] CALL __skb_queue_head_init(list) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, list={4139:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L5179] struct sk_buff *tmp ; [L5182] tmp = (struct sk_buff *)list [L5183] FCALL list->next = tmp [L5184] FCALL list->prev = tmp [L5185] RET, FCALL list->qlen = 0U VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, list={4139:0}, list={4139:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={4139:0}, tx_queue={4139:0}] [L5196] __skb_queue_head_init(list) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __key={4161:0}, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, list={4139:0}, list={4139:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L5197] RET return; VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, list={4139:0}, list={4139:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L6183] skb_queue_head_init(& tx_queue) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L6184] FCALL register_hdlc_protocol(& proto) [L6185] RET return (0); VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \result=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L6342] EXPR mod_init() VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4167, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=4168, ldvarg5={0:0}, ldvarg6={0:0}, mod_init()=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tmp___0=4167, tmp___1=4168, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=1, tx_queue={4139:0}] [L6342] ldv_retval_0 = mod_init() [L6343] COND TRUE ldv_retval_0 == 0 [L6344] ldv_state_variable_0 = 3 [L6345] ldv_state_variable_2 = 1 [L6346] ldv_state_variable_3 = 1 VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4167, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=4168, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tmp___0=4167, tmp___1=4168, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=1, tx_queue={4139:0}] [L6347] CALL ldv_initialize_hdlc_proto_3() VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L6228] void *tmp ; [L6229] void *tmp___0 ; VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L6232] CALL, EXPR ldv_zalloc(3264UL) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=3264, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L5255] void *p ; [L5256] void *tmp ; [L5257] int tmp___0 ; [L5260] tmp___0 = __VERIFIER_nondet_int() [L5261] COND TRUE tmp___0 != 0 [L5262] RET return ((void *)0); VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=3264, \result={0:0}, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, size=3264, tmp___0=1, tx_queue={4139:0}] [L6232] EXPR ldv_zalloc(3264UL) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(3264UL)={0:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L6232] tmp = ldv_zalloc(3264UL) [L6233] proto_group1 = (struct net_device *)tmp VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tx_queue={4139:0}] [L6234] CALL, EXPR ldv_zalloc(232UL) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=232, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L5255] void *p ; [L5256] void *tmp ; [L5257] int tmp___0 ; [L5260] tmp___0 = __VERIFIER_nondet_int() [L5261] COND TRUE tmp___0 != 0 [L5262] RET return ((void *)0); VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=232, \result={0:0}, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, size=232, tmp___0=1, tx_queue={4139:0}] [L6234] EXPR ldv_zalloc(232UL) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(232UL)={0:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tx_queue={4139:0}] [L6234] tmp___0 = ldv_zalloc(232UL) [L6235] RET proto_group0 = (struct sk_buff *)tmp___0 VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tmp___0={0:0}, tx_queue={4139:0}] [L6347] ldv_initialize_hdlc_proto_3() VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4167, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=4168, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tmp___0=4167, tmp___1=4168, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=1, tx_queue={4139:0}] [L6351] COND FALSE !(ldv_retval_0 != 0) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4167, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=4168, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tmp___0=4167, tmp___1=4168, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=1, tx_queue={4139:0}] [L6318] tmp___6 = __VERIFIER_nondet_int() [L6320] case 0: [L6327] case 1: [L6369] case 2: VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4167, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=4168, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tmp___0=4167, tmp___1=4168, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, tmp___7=1, tx_queue={4139:0}] [L6370] COND TRUE ldv_state_variable_3 != 0 [L6371] tmp___8 = __VERIFIER_nondet_int() [L6373] case 0: [L6381] case 1: [L6413] case 2: [L6445] case 3: [L6453] case 4: VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4167, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=4168, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tmp___0=4167, tmp___1=4168, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, tmp___7=1, tmp___8=4, tx_queue={4139:0}] [L6454] COND FALSE !(ldv_state_variable_3 == 4) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4167, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=4168, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tmp___0=4167, tmp___1=4168, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, tmp___7=1, tmp___8=4, tx_queue={4139:0}] [L6460] COND TRUE ldv_state_variable_3 == 1 VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4167, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=4168, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tmp___0=4167, tmp___1=4168, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, tmp___7=1, tmp___8=4, tx_queue={4139:0}] [L6461] CALL ppp_rx(proto_group0) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, skb={0:0}, tx_queue={4139:0}] [L5865] struct hdlc_header *hdr ; [L5866] struct net_device *dev ; [L5867] struct ppp *ppp ; [L5868] struct ppp *tmp ; [L5869] struct proto *proto___0 ; [L5870] struct cp_header *cp ; [L5871] unsigned long flags ; [L5872] unsigned int len ; [L5873] u16 pid ; [L5874] raw_spinlock_t *tmp___0 ; [L5875] unsigned char *tmp___1 ; [L5876] __u16 tmp___2 ; [L5877] __u16 tmp___3 ; [L5878] __u16 tmp___4 ; [L5881] EXPR, FCALL skb->data [L5881] hdr = (struct hdlc_header *)skb->data [L5882] EXPR, FCALL skb->dev [L5882] dev = skb->dev [L5883] CALL, EXPR get_ppp(dev) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, dev={4110:-3264}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L5414] struct hdlc_device *tmp ; VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, dev={4110:-3264}, dev={4110:-3264}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L5417] CALL, EXPR dev_to_hdlc(dev) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, dev={4110:-3264}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L5402] void *tmp ; VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, dev={4110:-3264}, dev={4110:-3264}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L5405] CALL, EXPR netdev_priv((struct net_device const *)dev) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, dev={4110:-3264}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L5353] RET return ((void *)dev + 3264U); VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \result={4110:0}, __this_module={4160:4156}, cp_table={4116:0}, dev={4110:-3264}, dev={4110:-3264}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L5405] EXPR netdev_priv((struct net_device const *)dev) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, dev={4110:-3264}, dev={4110:-3264}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, netdev_priv((struct net_device const *)dev)={4110:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L5405] tmp = netdev_priv((struct net_device const *)dev) [L5406] RET return ((struct hdlc_device *)tmp); VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \result={4110:0}, __this_module={4160:4156}, cp_table={4116:0}, dev={4110:-3264}, dev={4110:-3264}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={4110:0}, tx_queue={4139:0}] [L5417] EXPR dev_to_hdlc(dev) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, dev={4110:-3264}, dev={4110:-3264}, dev_to_hdlc(dev)={4110:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L5417] tmp = dev_to_hdlc(dev) [L5418] EXPR, FCALL tmp->state [L5418] RET return ((struct ppp *)tmp->state); [L5883] EXPR get_ppp(dev) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, dev={4110:-3264}, get_ppp(dev)={4105:-435}, hdr={4123:4141}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, skb={0:0}, skb={0:0}, tx_queue={4139:0}] [L5883] tmp = get_ppp(dev) [L5884] ppp = tmp VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, dev={4110:-3264}, hdr={4123:4141}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp={4105:-435}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, skb={0:0}, skb={0:0}, tmp={4105:-435}, tx_queue={4139:0}] [L5885] CALL, EXPR spinlock_check(& ppp->lock) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, lock={4105:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L5137] RET return (& lock->ldv_6338.rlock); VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \result={4105:0}, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, lock={4105:0}, lock={4105:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L5885] EXPR spinlock_check(& ppp->lock) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, dev={4110:-3264}, hdr={4123:4141}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp={4105:-435}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, skb={0:0}, skb={0:0}, spinlock_check(& ppp->lock)={4105:0}, tmp={4105:-435}, tx_queue={4139:0}] [L5885] tmp___0 = spinlock_check(& ppp->lock) [L5886] EXPR, FCALL _raw_spin_lock_irqsave(tmp___0) [L5886] flags = _raw_spin_lock_irqsave(tmp___0) [L5887] EXPR, FCALL skb->len VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, dev={4110:-3264}, hdr={4123:4141}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp={4105:-435}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, skb={0:0}, skb={0:0}, skb->len=0, tmp={4105:-435}, tmp___0={4105:0}, tx_queue={4139:0}] [L5887] COND TRUE skb->len <= 3U [L5994] EXPR, FCALL dev->stats.rx_errors [L5994] FCALL dev->stats.rx_errors = dev->stats.rx_errors + 1UL [L5996] CALL spin_unlock_irqrestore(& ppp->lock, flags) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(flags)=4120, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, lock={4105:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L5145] RET, FCALL _raw_spin_unlock_irqrestore(& lock->ldv_6338.rlock, flags) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(flags)=4120, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, flags=4120, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, lock={4105:0}, lock={4105:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L5996] spin_unlock_irqrestore(& ppp->lock, flags) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, dev={4110:-3264}, flags=4120, hdr={4123:4141}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp={4105:-435}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, skb={0:0}, skb={0:0}, tmp={4105:-435}, tmp___0={4105:0}, tx_queue={4139:0}] [L5997] CALL dev_kfree_skb_any(skb) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, skb={0:0}, tx_queue={4139:0}] [L5363] RET, FCALL __dev_kfree_skb_any(skb, 1) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, skb={0:0}, skb={0:0}, tx_queue={4139:0}] [L5997] dev_kfree_skb_any(skb) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, dev={4110:-3264}, flags=4120, hdr={4123:4141}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp={4105:-435}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, skb={0:0}, skb={0:0}, tmp={4105:-435}, tmp___0={4105:0}, tx_queue={4139:0}] [L5998] CALL ppp_tx_flush() VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L5519] struct sk_buff *skb ; VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L5526] CALL, EXPR ldv_skb_dequeue_12(& tx_queue) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, ldv_func_arg1={4139:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L6625] struct sk_buff *tmp ; VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, ldv_func_arg1={4139:0}, ldv_func_arg1={4139:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L6628] CALL, EXPR ldv_skb_alloc() VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L6839] void *skb ; [L6840] void *tmp___7 ; VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L6843] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=248, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L5255] void *p ; [L5256] void *tmp ; [L5257] int tmp___0 ; [L5260] tmp___0 = __VERIFIER_nondet_int() [L5261] COND FALSE !(tmp___0 != 0) [L5264] EXPR, FCALL calloc(1UL, size) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=248, __this_module={4160:4156}, calloc(1UL, size)={1:0}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, size=248, tmp___0=0, tx_queue={4139:0}] [L5264] EXPR, FCALL calloc(1UL, size) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=248, __this_module={4160:4156}, calloc(1UL, size)={1:0}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, size=248, tmp___0=0, tx_queue={4139:0}] [L5264] tmp = calloc(1UL, size) [L5265] p = tmp [L5267] RET return (p); VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=248, \result={1:0}, __this_module={4160:4156}, calloc(1UL, size)={1:0}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, p={1:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, size=248, tmp={1:0}, tmp___0=0, tx_queue={4139:0}] [L6843] EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(sizeof(struct sk_buff___0 ))={1:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L6843] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L6844] skb = (struct sk_buff___0 *)tmp___7 VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, skb={1:0}, tmp___7={1:0}, tx_queue={4139:0}] [L6845] COND FALSE !(! skb) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, skb={1:0}, tmp___7={1:0}, tx_queue={4139:0}] [L6848] CALL ldv_set_add(LDV_SKBS, skb) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, e={1:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set_impl={4149:0}, tx_queue={4139:0}] [L6694] int i ; [L6697] i = 0 VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, e={1:0}, e={1:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={4149:0}, tx_queue={4139:0}] [L6698] COND TRUE 1 VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, e={1:0}, e={1:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={4149:0}, tx_queue={4139:0}] [L6699] COND FALSE !(i < last_index) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, e={1:0}, e={1:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={4149:0}, tx_queue={4139:0}] [L6711] COND TRUE last_index < 15 [L6712] FCALL set_impl[last_index] = e [L6713] RET last_index = last_index + 1 VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, e={1:0}, e={1:0}, i=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={4149:0}, tx_queue={4139:0}] [L6848] ldv_set_add(LDV_SKBS, skb) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, skb={1:0}, tmp___7={1:0}, tx_queue={4139:0}] [L6849] RET return (skb); VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \result={1:0}, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, skb={1:0}, tmp___7={1:0}, tx_queue={4139:0}] [L6628] EXPR ldv_skb_alloc() VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, ldv_func_arg1={4139:0}, ldv_func_arg1={4139:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_skb_alloc()={1:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L6628] tmp = ldv_skb_alloc() [L6629] RET return (tmp); VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \result={1:0}, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, ldv_func_arg1={4139:0}, ldv_func_arg1={4139:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={1:0}, tx_queue={4139:0}] [L5526] EXPR ldv_skb_dequeue_12(& tx_queue) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_skb_dequeue_12(& tx_queue)={1:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L5526] skb = ldv_skb_dequeue_12(& tx_queue) [L5527] COND TRUE (unsigned long )skb != (unsigned long )((struct sk_buff *)0) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, skb={1:0}, tx_queue={4139:0}] [L5524] FCALL dev_queue_xmit(skb) [L5526] CALL, EXPR ldv_skb_dequeue_12(& tx_queue) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, ldv_func_arg1={4139:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L6625] struct sk_buff *tmp ; VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, ldv_func_arg1={4139:0}, ldv_func_arg1={4139:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L6628] CALL, EXPR ldv_skb_alloc() VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L6839] void *skb ; [L6840] void *tmp___7 ; VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L6843] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=248, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L5255] void *p ; [L5256] void *tmp ; [L5257] int tmp___0 ; [L5260] tmp___0 = __VERIFIER_nondet_int() [L5261] COND TRUE tmp___0 != 0 [L5262] RET return ((void *)0); VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=248, \result={0:0}, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, size=248, tmp___0=1, tx_queue={4139:0}] [L6843] EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(sizeof(struct sk_buff___0 ))={0:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L6843] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L6844] skb = (struct sk_buff___0 *)tmp___7 VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, skb={0:0}, tmp___7={0:0}, tx_queue={4139:0}] [L6845] COND TRUE ! skb [L6846] RET return ((void *)0); VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \result={0:0}, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, skb={0:0}, tmp___7={0:0}, tx_queue={4139:0}] [L6628] EXPR ldv_skb_alloc() VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, ldv_func_arg1={4139:0}, ldv_func_arg1={4139:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_skb_alloc()={0:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L6628] tmp = ldv_skb_alloc() [L6629] RET return (tmp); VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \result={0:0}, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, ldv_func_arg1={4139:0}, ldv_func_arg1={4139:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tx_queue={4139:0}] [L5526] EXPR ldv_skb_dequeue_12(& tx_queue) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_skb_dequeue_12(& tx_queue)={0:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, skb={1:0}, tx_queue={4139:0}] [L5526] skb = ldv_skb_dequeue_12(& tx_queue) [L5527] COND FALSE, RET !((unsigned long )skb != (unsigned long )((struct sk_buff *)0)) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, skb={0:0}, tx_queue={4139:0}] [L5998] ppp_tx_flush() VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, dev={4110:-3264}, flags=4120, hdr={4123:4141}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp={4105:-435}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, skb={0:0}, skb={0:0}, tmp={4105:-435}, tmp___0={4105:0}, tx_queue={4139:0}] [L5999] RET return (1); VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \result=1, __this_module={4160:4156}, cp_table={4116:0}, dev={4110:-3264}, flags=4120, hdr={4123:4141}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp={4105:-435}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, skb={0:0}, skb={0:0}, tmp={4105:-435}, tmp___0={4105:0}, tx_queue={4139:0}] [L6461] ppp_rx(proto_group0) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4167, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=4168, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={4127:0}, ppp_rx(proto_group0)=1, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tmp___0=4167, tmp___1=4168, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, tmp___7=1, tmp___8=4, tx_queue={4139:0}] [L6462] ldv_state_variable_3 = 1 VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4167, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=4168, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tmp___0=4167, tmp___1=4168, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, tmp___7=1, tmp___8=4, tx_queue={4139:0}] [L6466] COND FALSE !(ldv_state_variable_3 == 3) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4167, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=4168, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tmp___0=4167, tmp___1=4168, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, tmp___7=1, tmp___8=4, tx_queue={4139:0}] [L6472] COND FALSE !(ldv_state_variable_3 == 2) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4167, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=4168, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tmp___0=4167, tmp___1=4168, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, tmp___7=1, tmp___8=4, tx_queue={4139:0}] [L6478] COND FALSE !(ldv_state_variable_3 == 5) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4167, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=4168, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tmp___0=4167, tmp___1=4168, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, tmp___7=1, tmp___8=4, tx_queue={4139:0}] [L6318] tmp___6 = __VERIFIER_nondet_int() [L6320] case 0: [L6327] case 1: VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4167, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=4168, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tmp___0=4167, tmp___1=4168, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=1, tmp___8=4, tx_queue={4139:0}] [L6328] COND TRUE ldv_state_variable_0 != 0 [L6329] tmp___7 = __VERIFIER_nondet_int() [L6331] case 0: VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4167, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=4168, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tmp___0=4167, tmp___1=4168, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=0, tmp___8=4, tx_queue={4139:0}] [L6332] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4167, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=4168, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tmp___0=4167, tmp___1=4168, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=0, tmp___8=4, tx_queue={4139:0}] [L6333] CALL mod_exit() VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L6193] RET, FCALL unregister_hdlc_protocol(& proto) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L6333] mod_exit() VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4167, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=4168, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tmp___0=4167, tmp___1=4168, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=0, tmp___8=4, tx_queue={4139:0}] [L6334] ldv_state_variable_0 = 2 VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4167, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=4168, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp={0:0}, tmp___0=4167, tmp___1=4168, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=0, tmp___8=4, tx_queue={4139:0}] [L6574] CALL ldv_check_final_state() VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L6916] int tmp___7 ; VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L6919] CALL, EXPR ldv_set_is_empty(LDV_SKBS) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set_impl={4149:0}, tx_queue={4139:0}] [L6790] RET return (last_index == 0); VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \result=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={4149:0}, tx_queue={4139:0}] [L6919] EXPR ldv_set_is_empty(LDV_SKBS) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_set_is_empty(LDV_SKBS)=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L6919] tmp___7 = ldv_set_is_empty(LDV_SKBS) [L6920] COND FALSE !(\read(tmp___7)) VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tmp___7=0, tx_queue={4139:0}] [L6923] CALL ldv_error() VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] [L5304] __VERIFIER_error() VAL ["%s down\n"={4107:0}, "%s up\n"={4129:0}, "&(&list->lock)->rlock"={4169:0}, "&(&ppp->lock)->rlock"={4111:0}, "IPCP"={4147:0}, "IPV6CP"={4144:0}, "LCP"={4165:0}, "Link down\n"={4158:0}, "out of memory in ppp_tx_cp()\n"={4155:0}, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={4160:4156}, cp_table={4116:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={4127:0}, proto={4133:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={4149:0}, tx_queue={4139:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 81 procedures, 734 locations, 1 error locations. UNSAFE Result, 16.7s OverallTime, 10 OverallIterations, 9 TraceHistogramMax, 12.9s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 9374 SDtfs, 5678 SDslu, 21886 SDs, 0 SdLazy, 1080 SolverSat, 313 SolverUnsat, 5 SolverUnknown, 0 SolverNotchecked, 11.2s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 162 GetRequests, 126 SyntacticMatches, 1 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 17 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=4620occurred in iteration=9, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 1.1s AutomataMinimizationTime, 9 MinimizatonAttempts, 222 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 0.1s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 0.9s InterpolantComputationTime, 1673 NumberOfCodeBlocks, 1673 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 1448 ConstructedInterpolants, 0 QuantifiedInterpolants, 312976 SizeOfPredicates, 2 NumberOfNonLiveVariables, 855 ConjunctsInSsa, 10 ConjunctsInUnsatCore, 10 InterpolantComputations, 9 PerfectInterpolantSequences, 1053/1058 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! Received shutdown request...