./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--lapbether.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version eb692b52 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--lapbether.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 3c9185451e17cd03a558fe9bd455bfb656de587a9df23cb7cc44d8e38d5b1098 --- Real Ultimate output --- This is Ultimate 0.2.2-?-eb692b5 [2022-07-19 23:33:09,367 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-19 23:33:09,369 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-19 23:33:09,418 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-19 23:33:09,418 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-19 23:33:09,420 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-19 23:33:09,422 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-19 23:33:09,424 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-19 23:33:09,426 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-19 23:33:09,431 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-19 23:33:09,432 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-19 23:33:09,434 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-19 23:33:09,435 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-19 23:33:09,437 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-19 23:33:09,438 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-19 23:33:09,442 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-19 23:33:09,442 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-19 23:33:09,444 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-19 23:33:09,445 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-19 23:33:09,452 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-19 23:33:09,454 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-19 23:33:09,455 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-19 23:33:09,456 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-19 23:33:09,456 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-19 23:33:09,458 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-19 23:33:09,460 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-19 23:33:09,461 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-19 23:33:09,461 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-19 23:33:09,462 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-19 23:33:09,462 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-19 23:33:09,464 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-19 23:33:09,464 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-19 23:33:09,465 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-19 23:33:09,466 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-19 23:33:09,466 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-19 23:33:09,467 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-19 23:33:09,467 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-19 23:33:09,468 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-19 23:33:09,468 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-19 23:33:09,468 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-19 23:33:09,469 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-19 23:33:09,471 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-19 23:33:09,472 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2022-07-19 23:33:09,505 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-19 23:33:09,505 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-19 23:33:09,506 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-19 23:33:09,506 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-19 23:33:09,506 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-19 23:33:09,507 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-19 23:33:09,507 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-19 23:33:09,508 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-19 23:33:09,508 INFO L138 SettingsManager]: * Use SBE=true [2022-07-19 23:33:09,508 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-19 23:33:09,509 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-19 23:33:09,509 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-19 23:33:09,509 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-19 23:33:09,509 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-19 23:33:09,509 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-19 23:33:09,510 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-19 23:33:09,510 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-19 23:33:09,510 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-19 23:33:09,510 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-19 23:33:09,511 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-19 23:33:09,511 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-19 23:33:09,512 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-19 23:33:09,512 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-19 23:33:09,512 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-19 23:33:09,519 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-19 23:33:09,519 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-19 23:33:09,519 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-19 23:33:09,519 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-19 23:33:09,520 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-19 23:33:09,520 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-19 23:33:09,520 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 3c9185451e17cd03a558fe9bd455bfb656de587a9df23cb7cc44d8e38d5b1098 [2022-07-19 23:33:09,767 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-19 23:33:09,787 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-19 23:33:09,790 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-19 23:33:09,791 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-19 23:33:09,792 INFO L275 PluginConnector]: CDTParser initialized [2022-07-19 23:33:09,793 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--lapbether.ko-entry_point.cil.out.i [2022-07-19 23:33:09,845 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d2a253027/dc312f0171dd4d1cafd31fde15436607/FLAGf6d1f1599 [2022-07-19 23:33:10,708 INFO L306 CDTParser]: Found 1 translation units. [2022-07-19 23:33:10,709 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--lapbether.ko-entry_point.cil.out.i [2022-07-19 23:33:10,748 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d2a253027/dc312f0171dd4d1cafd31fde15436607/FLAGf6d1f1599 [2022-07-19 23:33:10,834 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d2a253027/dc312f0171dd4d1cafd31fde15436607 [2022-07-19 23:33:10,837 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-19 23:33:10,838 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-19 23:33:10,840 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-19 23:33:10,840 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-19 23:33:10,843 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-19 23:33:10,843 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.07 11:33:10" (1/1) ... [2022-07-19 23:33:10,844 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@77b594df and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 11:33:10, skipping insertion in model container [2022-07-19 23:33:10,844 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.07 11:33:10" (1/1) ... [2022-07-19 23:33:10,851 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-19 23:33:10,948 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-19 23:33:11,707 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--lapbether.ko-entry_point.cil.out.i[174669,174682] [2022-07-19 23:33:12,064 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-19 23:33:12,092 INFO L203 MainTranslator]: Completed pre-run [2022-07-19 23:33:12,225 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--lapbether.ko-entry_point.cil.out.i[174669,174682] [2022-07-19 23:33:12,351 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-19 23:33:12,416 INFO L208 MainTranslator]: Completed translation [2022-07-19 23:33:12,417 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 11:33:12 WrapperNode [2022-07-19 23:33:12,418 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-19 23:33:12,419 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-19 23:33:12,419 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-19 23:33:12,419 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-19 23:33:12,425 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 11:33:12" (1/1) ... [2022-07-19 23:33:12,486 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 11:33:12" (1/1) ... [2022-07-19 23:33:12,610 INFO L137 Inliner]: procedures = 177, calls = 512, calls flagged for inlining = 97, calls inlined = 94, statements flattened = 1880 [2022-07-19 23:33:12,611 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-19 23:33:12,612 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-19 23:33:12,612 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-19 23:33:12,612 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-19 23:33:12,621 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 11:33:12" (1/1) ... [2022-07-19 23:33:12,621 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 11:33:12" (1/1) ... [2022-07-19 23:33:12,640 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 11:33:12" (1/1) ... [2022-07-19 23:33:12,641 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 11:33:12" (1/1) ... [2022-07-19 23:33:12,708 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 11:33:12" (1/1) ... [2022-07-19 23:33:12,728 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 11:33:12" (1/1) ... [2022-07-19 23:33:12,742 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 11:33:12" (1/1) ... [2022-07-19 23:33:12,765 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-19 23:33:12,768 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-19 23:33:12,768 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-19 23:33:12,768 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-19 23:33:12,769 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 11:33:12" (1/1) ... [2022-07-19 23:33:12,776 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-19 23:33:12,785 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-19 23:33:12,804 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-19 23:33:12,810 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-19 23:33:12,843 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2022-07-19 23:33:12,844 INFO L130 BoogieDeclarations]: Found specification of procedure strncmp [2022-07-19 23:33:12,844 INFO L130 BoogieDeclarations]: Found specification of procedure dev_put [2022-07-19 23:33:12,844 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_put [2022-07-19 23:33:12,844 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-07-19 23:33:12,844 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-07-19 23:33:12,844 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_18 [2022-07-19 23:33:12,844 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_18 [2022-07-19 23:33:12,845 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-07-19 23:33:12,845 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-07-19 23:33:12,845 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-07-19 23:33:12,845 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2022-07-19 23:33:12,845 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2022-07-19 23:33:12,845 INFO L130 BoogieDeclarations]: Found specification of procedure skb_headroom [2022-07-19 23:33:12,845 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_headroom [2022-07-19 23:33:12,846 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2022-07-19 23:33:12,846 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2022-07-19 23:33:12,846 INFO L130 BoogieDeclarations]: Found specification of procedure debug_lockdep_rcu_enabled [2022-07-19 23:33:12,846 INFO L138 BoogieDeclarations]: Found implementation of procedure debug_lockdep_rcu_enabled [2022-07-19 23:33:12,846 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_free [2022-07-19 23:33:12,846 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_free [2022-07-19 23:33:12,846 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-07-19 23:33:12,847 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-07-19 23:33:12,847 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_size_call_parameter [2022-07-19 23:33:12,847 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_is_watching [2022-07-19 23:33:12,847 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_is_watching [2022-07-19 23:33:12,847 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_read_lock_held [2022-07-19 23:33:12,847 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_read_lock_held [2022-07-19 23:33:12,847 INFO L130 BoogieDeclarations]: Found specification of procedure lapbeth_disconnected [2022-07-19 23:33:12,848 INFO L138 BoogieDeclarations]: Found implementation of procedure lapbeth_disconnected [2022-07-19 23:33:12,848 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2022-07-19 23:33:12,848 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2022-07-19 23:33:12,848 INFO L130 BoogieDeclarations]: Found specification of procedure lapbeth_data_transmit [2022-07-19 23:33:12,848 INFO L138 BoogieDeclarations]: Found implementation of procedure lapbeth_data_transmit [2022-07-19 23:33:12,848 INFO L130 BoogieDeclarations]: Found specification of procedure lapbeth_data_indication [2022-07-19 23:33:12,848 INFO L138 BoogieDeclarations]: Found implementation of procedure lapbeth_data_indication [2022-07-19 23:33:12,849 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-07-19 23:33:12,849 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-07-19 23:33:12,849 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-07-19 23:33:12,849 INFO L130 BoogieDeclarations]: Found specification of procedure skb_pull [2022-07-19 23:33:12,850 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_pull [2022-07-19 23:33:12,850 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-07-19 23:33:12,850 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-07-19 23:33:12,850 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2022-07-19 23:33:12,850 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2022-07-19 23:33:12,851 INFO L130 BoogieDeclarations]: Found specification of procedure lapbeth_set_mac_address [2022-07-19 23:33:12,851 INFO L138 BoogieDeclarations]: Found implementation of procedure lapbeth_set_mac_address [2022-07-19 23:33:12,851 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-07-19 23:33:12,851 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-07-19 23:33:12,851 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-07-19 23:33:12,851 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_free_int [2022-07-19 23:33:12,851 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_free_int [2022-07-19 23:33:12,852 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-19 23:33:12,852 INFO L130 BoogieDeclarations]: Found specification of procedure x25_type_trans [2022-07-19 23:33:12,852 INFO L138 BoogieDeclarations]: Found implementation of procedure x25_type_trans [2022-07-19 23:33:12,853 INFO L130 BoogieDeclarations]: Found specification of procedure dev_net [2022-07-19 23:33:12,853 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_net [2022-07-19 23:33:12,853 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-07-19 23:33:12,854 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-07-19 23:33:12,854 INFO L130 BoogieDeclarations]: Found specification of procedure lockdep_rcu_suspicious [2022-07-19 23:33:12,854 INFO L138 BoogieDeclarations]: Found implementation of procedure lockdep_rcu_suspicious [2022-07-19 23:33:12,854 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_percpu_size [2022-07-19 23:33:12,854 INFO L130 BoogieDeclarations]: Found specification of procedure lapbeth_get_x25_dev [2022-07-19 23:33:12,855 INFO L138 BoogieDeclarations]: Found implementation of procedure lapbeth_get_x25_dev [2022-07-19 23:33:12,855 INFO L130 BoogieDeclarations]: Found specification of procedure skb_headlen [2022-07-19 23:33:12,855 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_headlen [2022-07-19 23:33:12,855 INFO L130 BoogieDeclarations]: Found specification of procedure netif_running [2022-07-19 23:33:12,855 INFO L138 BoogieDeclarations]: Found implementation of procedure netif_running [2022-07-19 23:33:12,855 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-07-19 23:33:12,855 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_remove [2022-07-19 23:33:12,856 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_remove [2022-07-19 23:33:12,856 INFO L130 BoogieDeclarations]: Found specification of procedure lapbeth_connected [2022-07-19 23:33:12,856 INFO L138 BoogieDeclarations]: Found implementation of procedure lapbeth_connected [2022-07-19 23:33:12,856 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-07-19 23:33:12,857 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-07-19 23:33:12,857 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2022-07-19 23:33:12,857 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2022-07-19 23:33:12,857 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_successful_zalloc [2022-07-19 23:33:12,857 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_successful_zalloc [2022-07-19 23:33:12,857 INFO L130 BoogieDeclarations]: Found specification of procedure netdev_priv [2022-07-19 23:33:12,857 INFO L138 BoogieDeclarations]: Found implementation of procedure netdev_priv [2022-07-19 23:33:12,858 INFO L130 BoogieDeclarations]: Found specification of procedure netdev_get_tx_queue [2022-07-19 23:33:12,858 INFO L138 BoogieDeclarations]: Found implementation of procedure netdev_get_tx_queue [2022-07-19 23:33:12,858 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-19 23:33:12,858 INFO L130 BoogieDeclarations]: Found specification of procedure unregister_netdevice [2022-07-19 23:33:12,858 INFO L138 BoogieDeclarations]: Found implementation of procedure unregister_netdevice [2022-07-19 23:33:12,858 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2022-07-19 23:33:12,858 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-19 23:33:12,859 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-19 23:33:13,323 INFO L234 CfgBuilder]: Building ICFG [2022-07-19 23:33:13,341 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-19 23:33:13,583 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-07-19 23:33:14,486 INFO L275 CfgBuilder]: Performing block encoding [2022-07-19 23:33:14,497 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-19 23:33:14,497 INFO L299 CfgBuilder]: Removed 3 assume(true) statements. [2022-07-19 23:33:14,499 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.07 11:33:14 BoogieIcfgContainer [2022-07-19 23:33:14,500 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-19 23:33:14,501 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-19 23:33:14,501 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-19 23:33:14,504 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-19 23:33:14,505 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 19.07 11:33:10" (1/3) ... [2022-07-19 23:33:14,505 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7e7370b9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.07 11:33:14, skipping insertion in model container [2022-07-19 23:33:14,506 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 11:33:12" (2/3) ... [2022-07-19 23:33:14,506 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7e7370b9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.07 11:33:14, skipping insertion in model container [2022-07-19 23:33:14,506 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.07 11:33:14" (3/3) ... [2022-07-19 23:33:14,507 INFO L111 eAbstractionObserver]: Analyzing ICFG 205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--lapbether.ko-entry_point.cil.out.i [2022-07-19 23:33:14,519 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-19 23:33:14,520 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-19 23:33:14,573 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-19 23:33:14,578 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@5132ed0f, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@75175834 [2022-07-19 23:33:14,579 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-19 23:33:14,585 INFO L276 IsEmpty]: Start isEmpty. Operand has 727 states, 585 states have (on average 1.488888888888889) internal successors, (871), 595 states have internal predecessors, (871), 106 states have call successors, (106), 35 states have call predecessors, (106), 34 states have return successors, (100), 100 states have call predecessors, (100), 100 states have call successors, (100) [2022-07-19 23:33:14,600 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 151 [2022-07-19 23:33:14,601 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 23:33:14,601 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 23:33:14,602 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 23:33:14,606 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 23:33:14,607 INFO L85 PathProgramCache]: Analyzing trace with hash -272515885, now seen corresponding path program 1 times [2022-07-19 23:33:14,615 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 23:33:14,615 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1728002545] [2022-07-19 23:33:14,615 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 23:33:14,616 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 23:33:14,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:14,944 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 23:33:14,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:14,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:14,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:14,985 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:14,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:14,993 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-19 23:33:14,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:15,009 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:15,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:15,019 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:15,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:15,026 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-19 23:33:15,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:15,039 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:15,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:15,048 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:15,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:15,055 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-07-19 23:33:15,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:15,082 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:15,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:15,089 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:15,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:15,107 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2022-07-19 23:33:15,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:15,152 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:15,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:15,172 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:15,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:15,178 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2022-07-19 23:33:15,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:15,208 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:15,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:15,226 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:15,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:15,232 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-07-19 23:33:15,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:15,250 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:15,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:15,260 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:15,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:15,270 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2022-07-19 23:33:15,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:15,285 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:15,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:15,291 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:15,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:15,297 INFO L134 CoverageAnalysis]: Checked inductivity of 392 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 392 trivial. 0 not checked. [2022-07-19 23:33:15,298 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 23:33:15,298 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1728002545] [2022-07-19 23:33:15,299 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1728002545] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 23:33:15,299 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 23:33:15,299 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-19 23:33:15,301 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [265100132] [2022-07-19 23:33:15,301 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 23:33:15,305 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-07-19 23:33:15,306 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 23:33:15,332 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-19 23:33:15,333 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-07-19 23:33:15,336 INFO L87 Difference]: Start difference. First operand has 727 states, 585 states have (on average 1.488888888888889) internal successors, (871), 595 states have internal predecessors, (871), 106 states have call successors, (106), 35 states have call predecessors, (106), 34 states have return successors, (100), 100 states have call predecessors, (100), 100 states have call successors, (100) Second operand has 4 states, 4 states have (on average 9.5) internal successors, (38), 2 states have internal predecessors, (38), 2 states have call successors, (11), 4 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-07-19 23:33:15,986 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 23:33:15,987 INFO L93 Difference]: Finished difference Result 1498 states and 2279 transitions. [2022-07-19 23:33:15,988 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-07-19 23:33:15,989 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.5) internal successors, (38), 2 states have internal predecessors, (38), 2 states have call successors, (11), 4 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 150 [2022-07-19 23:33:15,990 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 23:33:16,017 INFO L225 Difference]: With dead ends: 1498 [2022-07-19 23:33:16,017 INFO L226 Difference]: Without dead ends: 763 [2022-07-19 23:33:16,027 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 66 GetRequests, 64 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-07-19 23:33:16,030 INFO L413 NwaCegarLoop]: 1048 mSDtfsCounter, 264 mSDsluCounter, 1296 mSDsCounter, 0 mSdLazyCounter, 249 mSolverCounterSat, 119 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 274 SdHoareTripleChecker+Valid, 2344 SdHoareTripleChecker+Invalid, 368 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 119 IncrementalHoareTripleChecker+Valid, 249 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-07-19 23:33:16,031 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [274 Valid, 2344 Invalid, 368 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [119 Valid, 249 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-07-19 23:33:16,047 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 763 states. [2022-07-19 23:33:16,127 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 763 to 714. [2022-07-19 23:33:16,149 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 714 states, 580 states have (on average 1.467241379310345) internal successors, (851), 582 states have internal predecessors, (851), 100 states have call successors, (100), 34 states have call predecessors, (100), 33 states have return successors, (99), 99 states have call predecessors, (99), 99 states have call successors, (99) [2022-07-19 23:33:16,155 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 714 states to 714 states and 1050 transitions. [2022-07-19 23:33:16,158 INFO L78 Accepts]: Start accepts. Automaton has 714 states and 1050 transitions. Word has length 150 [2022-07-19 23:33:16,158 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 23:33:16,158 INFO L495 AbstractCegarLoop]: Abstraction has 714 states and 1050 transitions. [2022-07-19 23:33:16,159 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.5) internal successors, (38), 2 states have internal predecessors, (38), 2 states have call successors, (11), 4 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-07-19 23:33:16,159 INFO L276 IsEmpty]: Start isEmpty. Operand 714 states and 1050 transitions. [2022-07-19 23:33:16,170 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 151 [2022-07-19 23:33:16,171 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 23:33:16,171 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 23:33:16,172 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-19 23:33:16,172 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 23:33:16,173 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 23:33:16,173 INFO L85 PathProgramCache]: Analyzing trace with hash -1960355613, now seen corresponding path program 1 times [2022-07-19 23:33:16,173 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 23:33:16,174 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1914815043] [2022-07-19 23:33:16,174 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 23:33:16,174 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 23:33:16,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:16,311 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 23:33:16,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:16,324 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:16,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:16,329 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:16,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:16,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-19 23:33:16,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:16,341 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:16,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:16,346 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:16,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:16,350 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-19 23:33:16,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:16,358 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:16,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:16,363 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:16,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:16,368 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-07-19 23:33:16,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:16,375 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:16,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:16,379 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:16,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:16,384 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2022-07-19 23:33:16,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:16,391 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:16,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:16,396 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:16,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:16,400 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2022-07-19 23:33:16,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:16,409 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:16,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:16,418 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:16,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:16,424 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-07-19 23:33:16,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:16,431 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:16,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:16,436 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:16,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:16,441 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2022-07-19 23:33:16,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:16,448 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:16,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:16,453 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:16,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:16,457 INFO L134 CoverageAnalysis]: Checked inductivity of 392 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 392 trivial. 0 not checked. [2022-07-19 23:33:16,458 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 23:33:16,458 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1914815043] [2022-07-19 23:33:16,458 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1914815043] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 23:33:16,458 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 23:33:16,458 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-19 23:33:16,459 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [963807228] [2022-07-19 23:33:16,459 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 23:33:16,460 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-19 23:33:16,460 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 23:33:16,461 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-19 23:33:16,461 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-07-19 23:33:16,461 INFO L87 Difference]: Start difference. First operand 714 states and 1050 transitions. Second operand has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 4 states have internal predecessors, (38), 2 states have call successors, (11), 4 states have call predecessors, (11), 1 states have return successors, (10), 1 states have call predecessors, (10), 1 states have call successors, (10) [2022-07-19 23:33:17,672 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 23:33:17,673 INFO L93 Difference]: Finished difference Result 1851 states and 2800 transitions. [2022-07-19 23:33:17,673 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-07-19 23:33:17,674 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 4 states have internal predecessors, (38), 2 states have call successors, (11), 4 states have call predecessors, (11), 1 states have return successors, (10), 1 states have call predecessors, (10), 1 states have call successors, (10) Word has length 150 [2022-07-19 23:33:17,674 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 23:33:17,681 INFO L225 Difference]: With dead ends: 1851 [2022-07-19 23:33:17,683 INFO L226 Difference]: Without dead ends: 1157 [2022-07-19 23:33:17,687 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 58 GetRequests, 51 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=24, Invalid=48, Unknown=0, NotChecked=0, Total=72 [2022-07-19 23:33:17,689 INFO L413 NwaCegarLoop]: 1592 mSDtfsCounter, 1817 mSDsluCounter, 3078 mSDsCounter, 0 mSdLazyCounter, 780 mSolverCounterSat, 296 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1869 SdHoareTripleChecker+Valid, 4670 SdHoareTripleChecker+Invalid, 1076 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 296 IncrementalHoareTripleChecker+Valid, 780 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-07-19 23:33:17,689 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1869 Valid, 4670 Invalid, 1076 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [296 Valid, 780 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-07-19 23:33:17,691 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1157 states. [2022-07-19 23:33:17,739 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1157 to 714. [2022-07-19 23:33:17,741 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 714 states, 580 states have (on average 1.4637931034482758) internal successors, (849), 582 states have internal predecessors, (849), 100 states have call successors, (100), 34 states have call predecessors, (100), 33 states have return successors, (99), 99 states have call predecessors, (99), 99 states have call successors, (99) [2022-07-19 23:33:17,744 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 714 states to 714 states and 1048 transitions. [2022-07-19 23:33:17,744 INFO L78 Accepts]: Start accepts. Automaton has 714 states and 1048 transitions. Word has length 150 [2022-07-19 23:33:17,745 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 23:33:17,745 INFO L495 AbstractCegarLoop]: Abstraction has 714 states and 1048 transitions. [2022-07-19 23:33:17,745 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 4 states have internal predecessors, (38), 2 states have call successors, (11), 4 states have call predecessors, (11), 1 states have return successors, (10), 1 states have call predecessors, (10), 1 states have call successors, (10) [2022-07-19 23:33:17,745 INFO L276 IsEmpty]: Start isEmpty. Operand 714 states and 1048 transitions. [2022-07-19 23:33:17,747 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 151 [2022-07-19 23:33:17,748 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 23:33:17,748 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 23:33:17,748 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-19 23:33:17,748 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 23:33:17,749 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 23:33:17,749 INFO L85 PathProgramCache]: Analyzing trace with hash 147056539, now seen corresponding path program 1 times [2022-07-19 23:33:17,749 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 23:33:17,749 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [134219802] [2022-07-19 23:33:17,750 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 23:33:17,750 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 23:33:17,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:17,841 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 23:33:17,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:17,873 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:17,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:17,879 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:17,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:17,892 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-19 23:33:17,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:17,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:17,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:17,904 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:17,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:17,909 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-19 23:33:17,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:17,916 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:17,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:17,927 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:17,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:17,932 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-07-19 23:33:17,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:17,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:17,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:17,944 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:17,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:17,952 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2022-07-19 23:33:17,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:17,960 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:17,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:17,967 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:17,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:17,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2022-07-19 23:33:17,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:17,981 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:17,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:17,991 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:17,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:17,996 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-07-19 23:33:17,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:18,028 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:18,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:18,034 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:18,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:18,039 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2022-07-19 23:33:18,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:18,047 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:18,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:18,053 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:18,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:18,058 INFO L134 CoverageAnalysis]: Checked inductivity of 392 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 392 trivial. 0 not checked. [2022-07-19 23:33:18,059 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 23:33:18,059 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [134219802] [2022-07-19 23:33:18,059 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [134219802] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 23:33:18,059 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 23:33:18,060 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-19 23:33:18,060 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1705058412] [2022-07-19 23:33:18,060 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 23:33:18,061 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-19 23:33:18,061 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 23:33:18,061 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-19 23:33:18,062 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-07-19 23:33:18,062 INFO L87 Difference]: Start difference. First operand 714 states and 1048 transitions. Second operand has 5 states, 5 states have (on average 7.6) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (11), 4 states have call predecessors, (11), 1 states have return successors, (10), 1 states have call predecessors, (10), 1 states have call successors, (10) [2022-07-19 23:33:19,225 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 23:33:19,226 INFO L93 Difference]: Finished difference Result 2170 states and 3211 transitions. [2022-07-19 23:33:19,226 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-19 23:33:19,227 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.6) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (11), 4 states have call predecessors, (11), 1 states have return successors, (10), 1 states have call predecessors, (10), 1 states have call successors, (10) Word has length 150 [2022-07-19 23:33:19,230 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 23:33:19,240 INFO L225 Difference]: With dead ends: 2170 [2022-07-19 23:33:19,241 INFO L226 Difference]: Without dead ends: 1476 [2022-07-19 23:33:19,245 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 55 GetRequests, 50 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2022-07-19 23:33:19,253 INFO L413 NwaCegarLoop]: 1115 mSDtfsCounter, 1468 mSDsluCounter, 2077 mSDsCounter, 0 mSdLazyCounter, 721 mSolverCounterSat, 271 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1526 SdHoareTripleChecker+Valid, 3192 SdHoareTripleChecker+Invalid, 992 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 271 IncrementalHoareTripleChecker+Valid, 721 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-07-19 23:33:19,254 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1526 Valid, 3192 Invalid, 992 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [271 Valid, 721 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-07-19 23:33:19,258 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1476 states. [2022-07-19 23:33:19,327 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1476 to 1378. [2022-07-19 23:33:19,330 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1378 states, 1125 states have (on average 1.4746666666666666) internal successors, (1659), 1129 states have internal predecessors, (1659), 186 states have call successors, (186), 67 states have call predecessors, (186), 66 states have return successors, (185), 185 states have call predecessors, (185), 185 states have call successors, (185) [2022-07-19 23:33:19,341 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1378 states to 1378 states and 2030 transitions. [2022-07-19 23:33:19,342 INFO L78 Accepts]: Start accepts. Automaton has 1378 states and 2030 transitions. Word has length 150 [2022-07-19 23:33:19,344 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 23:33:19,350 INFO L495 AbstractCegarLoop]: Abstraction has 1378 states and 2030 transitions. [2022-07-19 23:33:19,350 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.6) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (11), 4 states have call predecessors, (11), 1 states have return successors, (10), 1 states have call predecessors, (10), 1 states have call successors, (10) [2022-07-19 23:33:19,350 INFO L276 IsEmpty]: Start isEmpty. Operand 1378 states and 2030 transitions. [2022-07-19 23:33:19,355 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 214 [2022-07-19 23:33:19,355 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 23:33:19,355 INFO L195 NwaCegarLoop]: trace histogram [11, 11, 11, 11, 11, 11, 11, 11, 11, 11, 11, 11, 11, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 23:33:19,356 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-19 23:33:19,356 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 23:33:19,356 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 23:33:19,357 INFO L85 PathProgramCache]: Analyzing trace with hash -716980191, now seen corresponding path program 1 times [2022-07-19 23:33:19,357 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 23:33:19,357 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [929837576] [2022-07-19 23:33:19,357 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 23:33:19,357 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 23:33:19,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:19,510 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 23:33:19,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:19,522 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:19,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:19,531 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:19,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:19,536 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-19 23:33:19,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:19,543 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:19,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:19,576 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:19,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:19,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-19 23:33:19,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:19,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:19,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:19,593 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:19,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:19,597 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-07-19 23:33:19,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:19,604 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:19,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:19,609 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:19,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:19,613 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2022-07-19 23:33:19,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:19,619 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:19,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:19,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:19,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:19,628 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2022-07-19 23:33:19,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:19,635 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:19,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:19,640 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:19,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:19,644 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-07-19 23:33:19,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:19,651 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:19,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:19,656 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:19,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:19,660 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2022-07-19 23:33:19,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:19,666 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:19,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:19,671 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:19,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:19,675 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 144 [2022-07-19 23:33:19,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:19,684 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:19,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:19,689 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:19,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:19,692 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 161 [2022-07-19 23:33:19,696 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:19,700 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:19,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:19,704 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:19,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:19,708 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 177 [2022-07-19 23:33:19,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:19,716 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:19,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:19,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:19,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:19,725 INFO L134 CoverageAnalysis]: Checked inductivity of 776 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 776 trivial. 0 not checked. [2022-07-19 23:33:19,725 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 23:33:19,725 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [929837576] [2022-07-19 23:33:19,725 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [929837576] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 23:33:19,725 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 23:33:19,726 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-19 23:33:19,726 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1529229469] [2022-07-19 23:33:19,726 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 23:33:19,726 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-19 23:33:19,727 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 23:33:19,727 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-19 23:33:19,727 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2022-07-19 23:33:19,727 INFO L87 Difference]: Start difference. First operand 1378 states and 2030 transitions. Second operand has 7 states, 7 states have (on average 7.285714285714286) internal successors, (51), 5 states have internal predecessors, (51), 3 states have call successors, (14), 4 states have call predecessors, (14), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-07-19 23:33:21,331 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 23:33:21,331 INFO L93 Difference]: Finished difference Result 4273 states and 6404 transitions. [2022-07-19 23:33:21,332 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-19 23:33:21,332 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.285714285714286) internal successors, (51), 5 states have internal predecessors, (51), 3 states have call successors, (14), 4 states have call predecessors, (14), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) Word has length 213 [2022-07-19 23:33:21,332 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 23:33:21,346 INFO L225 Difference]: With dead ends: 4273 [2022-07-19 23:33:21,347 INFO L226 Difference]: Without dead ends: 2901 [2022-07-19 23:33:21,352 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 77 GetRequests, 68 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=78, Unknown=0, NotChecked=0, Total=110 [2022-07-19 23:33:21,355 INFO L413 NwaCegarLoop]: 1312 mSDtfsCounter, 1694 mSDsluCounter, 3245 mSDsCounter, 0 mSdLazyCounter, 1559 mSolverCounterSat, 486 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1750 SdHoareTripleChecker+Valid, 4557 SdHoareTripleChecker+Invalid, 2045 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 486 IncrementalHoareTripleChecker+Valid, 1559 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2022-07-19 23:33:21,356 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1750 Valid, 4557 Invalid, 2045 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [486 Valid, 1559 Invalid, 0 Unknown, 0 Unchecked, 1.4s Time] [2022-07-19 23:33:21,359 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2901 states. [2022-07-19 23:33:21,444 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2901 to 2715. [2022-07-19 23:33:21,449 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2715 states, 2219 states have (on average 1.4785939612438035) internal successors, (3281), 2229 states have internal predecessors, (3281), 361 states have call successors, (361), 133 states have call predecessors, (361), 134 states have return successors, (408), 360 states have call predecessors, (408), 360 states have call successors, (408) [2022-07-19 23:33:21,469 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2715 states to 2715 states and 4050 transitions. [2022-07-19 23:33:21,470 INFO L78 Accepts]: Start accepts. Automaton has 2715 states and 4050 transitions. Word has length 213 [2022-07-19 23:33:21,471 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 23:33:21,472 INFO L495 AbstractCegarLoop]: Abstraction has 2715 states and 4050 transitions. [2022-07-19 23:33:21,472 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.285714285714286) internal successors, (51), 5 states have internal predecessors, (51), 3 states have call successors, (14), 4 states have call predecessors, (14), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-07-19 23:33:21,472 INFO L276 IsEmpty]: Start isEmpty. Operand 2715 states and 4050 transitions. [2022-07-19 23:33:21,482 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 247 [2022-07-19 23:33:21,483 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 23:33:21,483 INFO L195 NwaCegarLoop]: trace histogram [11, 11, 11, 11, 11, 11, 11, 11, 11, 11, 11, 11, 11, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 23:33:21,483 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-19 23:33:21,483 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 23:33:21,486 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 23:33:21,486 INFO L85 PathProgramCache]: Analyzing trace with hash 1676192007, now seen corresponding path program 1 times [2022-07-19 23:33:21,487 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 23:33:21,487 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [5923129] [2022-07-19 23:33:21,487 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 23:33:21,487 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 23:33:21,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,596 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 23:33:21,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,605 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:21,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,613 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:21,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-19 23:33:21,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:21,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,631 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:21,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,635 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-19 23:33:21,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,641 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:21,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,645 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:21,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,649 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-07-19 23:33:21,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,657 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:21,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,662 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:21,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,665 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2022-07-19 23:33:21,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,674 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:21,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,678 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:21,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,683 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2022-07-19 23:33:21,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,690 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:21,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,694 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:21,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,707 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-07-19 23:33:21,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,713 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:21,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,717 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:21,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,723 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2022-07-19 23:33:21,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:21,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,742 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:21,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,746 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 144 [2022-07-19 23:33:21,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,753 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:21,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,757 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:21,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,760 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 161 [2022-07-19 23:33:21,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,768 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:21,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,774 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:21,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,781 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 177 [2022-07-19 23:33:21,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,787 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:21,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,791 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:21,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,796 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 204 [2022-07-19 23:33:21,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,810 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 212 [2022-07-19 23:33:21,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,817 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:21,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:21,836 INFO L134 CoverageAnalysis]: Checked inductivity of 784 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 774 trivial. 0 not checked. [2022-07-19 23:33:21,837 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 23:33:21,837 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [5923129] [2022-07-19 23:33:21,837 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [5923129] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 23:33:21,837 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 23:33:21,837 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-19 23:33:21,838 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1730791835] [2022-07-19 23:33:21,838 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 23:33:21,838 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-19 23:33:21,838 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 23:33:21,839 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-19 23:33:21,839 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2022-07-19 23:33:21,839 INFO L87 Difference]: Start difference. First operand 2715 states and 4050 transitions. Second operand has 6 states, 6 states have (on average 13.333333333333334) internal successors, (80), 3 states have internal predecessors, (80), 2 states have call successors, (17), 5 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 1 states have call successors, (16) [2022-07-19 23:33:22,754 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 23:33:22,755 INFO L93 Difference]: Finished difference Result 4265 states and 6462 transitions. [2022-07-19 23:33:22,755 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-07-19 23:33:22,756 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 13.333333333333334) internal successors, (80), 3 states have internal predecessors, (80), 2 states have call successors, (17), 5 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 1 states have call successors, (16) Word has length 246 [2022-07-19 23:33:22,756 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 23:33:22,770 INFO L225 Difference]: With dead ends: 4265 [2022-07-19 23:33:22,770 INFO L226 Difference]: Without dead ends: 2903 [2022-07-19 23:33:22,776 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 79 GetRequests, 73 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=23, Invalid=33, Unknown=0, NotChecked=0, Total=56 [2022-07-19 23:33:22,777 INFO L413 NwaCegarLoop]: 1023 mSDtfsCounter, 767 mSDsluCounter, 1417 mSDsCounter, 0 mSdLazyCounter, 460 mSolverCounterSat, 347 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 771 SdHoareTripleChecker+Valid, 2440 SdHoareTripleChecker+Invalid, 807 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 347 IncrementalHoareTripleChecker+Valid, 460 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-07-19 23:33:22,778 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [771 Valid, 2440 Invalid, 807 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [347 Valid, 460 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-07-19 23:33:22,781 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2903 states. [2022-07-19 23:33:22,865 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2903 to 2733. [2022-07-19 23:33:22,870 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2733 states, 2231 states have (on average 1.476019722097714) internal successors, (3293), 2243 states have internal predecessors, (3293), 361 states have call successors, (361), 133 states have call predecessors, (361), 140 states have return successors, (428), 364 states have call predecessors, (428), 360 states have call successors, (428) [2022-07-19 23:33:22,891 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2733 states to 2733 states and 4082 transitions. [2022-07-19 23:33:22,891 INFO L78 Accepts]: Start accepts. Automaton has 2733 states and 4082 transitions. Word has length 246 [2022-07-19 23:33:22,892 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 23:33:22,892 INFO L495 AbstractCegarLoop]: Abstraction has 2733 states and 4082 transitions. [2022-07-19 23:33:22,892 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 13.333333333333334) internal successors, (80), 3 states have internal predecessors, (80), 2 states have call successors, (17), 5 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 1 states have call successors, (16) [2022-07-19 23:33:22,893 INFO L276 IsEmpty]: Start isEmpty. Operand 2733 states and 4082 transitions. [2022-07-19 23:33:22,902 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 262 [2022-07-19 23:33:22,903 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 23:33:22,903 INFO L195 NwaCegarLoop]: trace histogram [12, 12, 12, 12, 12, 12, 12, 12, 12, 12, 12, 12, 12, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 23:33:22,903 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-19 23:33:22,903 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 23:33:22,904 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 23:33:22,904 INFO L85 PathProgramCache]: Analyzing trace with hash 2076105357, now seen corresponding path program 1 times [2022-07-19 23:33:22,904 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 23:33:22,904 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2111850044] [2022-07-19 23:33:22,904 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 23:33:22,905 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 23:33:22,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,040 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 23:33:23,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,051 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:23,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,060 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:23,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,064 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-19 23:33:23,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,070 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:23,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,079 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:23,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,083 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-19 23:33:23,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,089 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:23,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,092 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:23,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,096 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-07-19 23:33:23,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,102 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:23,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,106 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:23,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,110 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2022-07-19 23:33:23,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,124 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:23,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,130 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:23,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,134 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2022-07-19 23:33:23,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,140 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:23,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,144 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:23,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,147 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-07-19 23:33:23,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,153 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:23,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,156 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:23,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,160 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2022-07-19 23:33:23,162 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,166 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:23,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,210 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:23,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,222 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 144 [2022-07-19 23:33:23,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,232 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:23,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,236 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:23,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,242 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 161 [2022-07-19 23:33:23,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,250 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:23,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,254 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:23,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,257 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 177 [2022-07-19 23:33:23,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,270 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:23,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,275 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:23,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,289 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 206 [2022-07-19 23:33:23,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,302 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:23,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,312 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:23,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,321 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:23,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,327 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 23:33:23,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,330 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-19 23:33:23,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 23:33:23,335 INFO L134 CoverageAnalysis]: Checked inductivity of 934 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 924 trivial. 0 not checked. [2022-07-19 23:33:23,335 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 23:33:23,335 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2111850044] [2022-07-19 23:33:23,336 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2111850044] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 23:33:23,336 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 23:33:23,336 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-19 23:33:23,336 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2095992835] [2022-07-19 23:33:23,336 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 23:33:23,337 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-19 23:33:23,337 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 23:33:23,337 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-19 23:33:23,337 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-07-19 23:33:23,338 INFO L87 Difference]: Start difference. First operand 2733 states and 4082 transitions. Second operand has 6 states, 6 states have (on average 13.833333333333334) internal successors, (83), 3 states have internal predecessors, (83), 3 states have call successors, (18), 5 states have call predecessors, (18), 1 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) [2022-07-19 23:33:25,126 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 23:33:25,126 INFO L93 Difference]: Finished difference Result 8395 states and 12588 transitions. [2022-07-19 23:33:25,127 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-19 23:33:25,127 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 13.833333333333334) internal successors, (83), 3 states have internal predecessors, (83), 3 states have call successors, (18), 5 states have call predecessors, (18), 1 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) Word has length 261 [2022-07-19 23:33:25,128 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 23:33:25,153 INFO L225 Difference]: With dead ends: 8395 [2022-07-19 23:33:25,153 INFO L226 Difference]: Without dead ends: 5682 [2022-07-19 23:33:25,161 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 86 GetRequests, 79 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=30, Invalid=42, Unknown=0, NotChecked=0, Total=72 [2022-07-19 23:33:25,162 INFO L413 NwaCegarLoop]: 1729 mSDtfsCounter, 1396 mSDsluCounter, 4094 mSDsCounter, 0 mSdLazyCounter, 1197 mSolverCounterSat, 234 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1467 SdHoareTripleChecker+Valid, 5823 SdHoareTripleChecker+Invalid, 1431 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 234 IncrementalHoareTripleChecker+Valid, 1197 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2022-07-19 23:33:25,162 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1467 Valid, 5823 Invalid, 1431 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [234 Valid, 1197 Invalid, 0 Unknown, 0 Unchecked, 1.5s Time] [2022-07-19 23:33:25,168 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5682 states. [2022-07-19 23:33:25,332 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5682 to 5330. [2022-07-19 23:33:25,346 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5330 states, 4384 states have (on average 1.4726277372262773) internal successors, (6456), 4410 states have internal predecessors, (6456), 665 states have call successors, (665), 265 states have call predecessors, (665), 280 states have return successors, (778), 670 states have call predecessors, (778), 664 states have call successors, (778) [2022-07-19 23:33:25,371 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5330 states to 5330 states and 7899 transitions. [2022-07-19 23:33:25,372 INFO L78 Accepts]: Start accepts. Automaton has 5330 states and 7899 transitions. Word has length 261 [2022-07-19 23:33:25,373 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 23:33:25,373 INFO L495 AbstractCegarLoop]: Abstraction has 5330 states and 7899 transitions. [2022-07-19 23:33:25,373 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 13.833333333333334) internal successors, (83), 3 states have internal predecessors, (83), 3 states have call successors, (18), 5 states have call predecessors, (18), 1 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) [2022-07-19 23:33:25,373 INFO L276 IsEmpty]: Start isEmpty. Operand 5330 states and 7899 transitions. [2022-07-19 23:33:25,387 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 262 [2022-07-19 23:33:25,388 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 23:33:25,388 INFO L195 NwaCegarLoop]: trace histogram [12, 12, 12, 12, 12, 12, 12, 12, 12, 12, 12, 12, 12, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 23:33:25,388 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-19 23:33:25,389 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 23:33:25,389 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 23:33:25,389 INFO L85 PathProgramCache]: Analyzing trace with hash 1757628959, now seen corresponding path program 1 times [2022-07-19 23:33:25,389 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 23:33:25,390 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1610915393] [2022-07-19 23:33:25,390 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 23:33:25,390 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 23:33:25,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-19 23:33:25,595 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-07-19 23:33:25,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-19 23:33:25,909 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-07-19 23:33:25,910 INFO L271 BasicCegarLoop]: Counterexample is feasible [2022-07-19 23:33:25,911 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-19 23:33:25,913 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-19 23:33:25,915 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1] [2022-07-19 23:33:25,919 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-19 23:33:26,198 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 19.07 11:33:26 BoogieIcfgContainer [2022-07-19 23:33:26,198 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-19 23:33:26,199 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-19 23:33:26,199 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-19 23:33:26,199 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-19 23:33:26,199 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.07 11:33:14" (3/4) ... [2022-07-19 23:33:26,201 INFO L131 WitnessPrinter]: Generating witness for reachability counterexample [2022-07-19 23:33:26,394 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-19 23:33:26,395 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-19 23:33:26,395 INFO L158 Benchmark]: Toolchain (without parser) took 15556.75ms. Allocated memory was 104.9MB in the beginning and 373.3MB in the end (delta: 268.4MB). Free memory was 78.8MB in the beginning and 183.2MB in the end (delta: -104.5MB). Peak memory consumption was 164.6MB. Max. memory is 16.1GB. [2022-07-19 23:33:26,396 INFO L158 Benchmark]: CDTParser took 0.19ms. Allocated memory is still 81.8MB. Free memory was 56.3MB in the beginning and 56.2MB in the end (delta: 75.8kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-19 23:33:26,396 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1578.85ms. Allocated memory was 104.9MB in the beginning and 132.1MB in the end (delta: 27.3MB). Free memory was 78.6MB in the beginning and 57.7MB in the end (delta: 20.9MB). Peak memory consumption was 61.9MB. Max. memory is 16.1GB. [2022-07-19 23:33:26,396 INFO L158 Benchmark]: Boogie Procedure Inliner took 191.87ms. Allocated memory is still 132.1MB. Free memory was 57.7MB in the beginning and 78.0MB in the end (delta: -20.3MB). Peak memory consumption was 16.9MB. Max. memory is 16.1GB. [2022-07-19 23:33:26,396 INFO L158 Benchmark]: Boogie Preprocessor took 154.95ms. Allocated memory is still 132.1MB. Free memory was 77.3MB in the beginning and 65.9MB in the end (delta: 11.4MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2022-07-19 23:33:26,397 INFO L158 Benchmark]: RCFGBuilder took 1731.85ms. Allocated memory was 132.1MB in the beginning and 213.9MB in the end (delta: 81.8MB). Free memory was 65.9MB in the beginning and 142.8MB in the end (delta: -76.9MB). Peak memory consumption was 55.5MB. Max. memory is 16.1GB. [2022-07-19 23:33:26,397 INFO L158 Benchmark]: TraceAbstraction took 11697.04ms. Allocated memory was 213.9MB in the beginning and 373.3MB in the end (delta: 159.4MB). Free memory was 141.8MB in the beginning and 243.0MB in the end (delta: -101.2MB). Peak memory consumption was 222.8MB. Max. memory is 16.1GB. [2022-07-19 23:33:26,399 INFO L158 Benchmark]: Witness Printer took 196.21ms. Allocated memory is still 373.3MB. Free memory was 243.0MB in the beginning and 183.2MB in the end (delta: 59.8MB). Peak memory consumption was 60.8MB. Max. memory is 16.1GB. [2022-07-19 23:33:26,402 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.19ms. Allocated memory is still 81.8MB. Free memory was 56.3MB in the beginning and 56.2MB in the end (delta: 75.8kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1578.85ms. Allocated memory was 104.9MB in the beginning and 132.1MB in the end (delta: 27.3MB). Free memory was 78.6MB in the beginning and 57.7MB in the end (delta: 20.9MB). Peak memory consumption was 61.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 191.87ms. Allocated memory is still 132.1MB. Free memory was 57.7MB in the beginning and 78.0MB in the end (delta: -20.3MB). Peak memory consumption was 16.9MB. Max. memory is 16.1GB. * Boogie Preprocessor took 154.95ms. Allocated memory is still 132.1MB. Free memory was 77.3MB in the beginning and 65.9MB in the end (delta: 11.4MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * RCFGBuilder took 1731.85ms. Allocated memory was 132.1MB in the beginning and 213.9MB in the end (delta: 81.8MB). Free memory was 65.9MB in the beginning and 142.8MB in the end (delta: -76.9MB). Peak memory consumption was 55.5MB. Max. memory is 16.1GB. * TraceAbstraction took 11697.04ms. Allocated memory was 213.9MB in the beginning and 373.3MB in the end (delta: 159.4MB). Free memory was 141.8MB in the beginning and 243.0MB in the end (delta: -101.2MB). Peak memory consumption was 222.8MB. Max. memory is 16.1GB. * Witness Printer took 196.21ms. Allocated memory is still 373.3MB. Free memory was 243.0MB in the beginning and 183.2MB in the end (delta: 59.8MB). Peak memory consumption was 60.8MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - CounterExampleResult [Line: 6079]: a call to reach_error is reachable a call to reach_error is reachable We found a FailurePath: [L6102] int ldv_state_variable_3 ; [L6103] int LDV_IN_INTERRUPT = 1; [L6104] int ldv_state_variable_2 ; [L6105] struct net_device *lapbeth_netdev_ops_group1 ; [L6106] int ref_cnt ; [L6107] struct sk_buff *lapbeth_callbacks_group0 ; [L6108] struct net_device *lapbeth_callbacks_group1 ; [L6109] int ldv_state_variable_1 ; [L6110] int ldv_state_variable_4 ; [L6111] int ldv_state_variable_0 ; [L6683-L6684] static u8 const bcast_addr[6U] = { 255U, 255U, 255U, 255U, 255U, 255U}; [L6685] static struct list_head lapbeth_devices = {& lapbeth_devices, & lapbeth_devices}; [L6968-L6969] static struct lapb_register_struct const lapbeth_callbacks = {& lapbeth_connected, & lapbeth_connected, & lapbeth_disconnected, & lapbeth_disconnected, & lapbeth_data_indication, & lapbeth_data_transmit}; [L6997-L7000] static struct net_device_ops const lapbeth_netdev_ops = {0, 0, & lapbeth_open, & lapbeth_close, & lapbeth_xmit, 0, 0, 0, & lapbeth_set_mac_address, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L7117] static struct packet_type lapbeth_packet_type = {96U, 0, & lapbeth_rcv, 0, 0, {0, 0}}; [L7118] static struct notifier_block lapbeth_dev_notifier = {& lapbeth_device_event, 0, 0}; [L7119-L7128] static char const banner[37U] = { '\016', 'L', 'A', 'P', 'B', ' ', 'E', 't', 'h', 'e', 'r', 'n', 'e', 't', ' ', 'd', 'r', 'i', 'v', 'e', 'r', ' ', 'v', 'e', 'r', 's', 'i', 'o', 'n', ' ', '0', '.', '0', '2', '\n', '\000'}; [L7169] int ldv_retval_2 ; [L7170] int ldv_retval_0 ; [L7172] int ldv_retval_1 ; [L7607] Element set_impl[15] ; [L7608] int last_index = 0; [L7742] Set LDV_SKBS ; VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L7198] int ldvarg1 ; [L7199] int tmp ; [L7200] int ldvarg3 ; [L7201] int tmp___0 ; [L7202] int ldvarg0 ; [L7203] int tmp___1 ; [L7204] int ldvarg2 ; [L7205] int tmp___2 ; [L7206] struct notifier_block *ldvarg4 ; [L7207] void *tmp___3 ; [L7208] void *ldvarg5 ; [L7209] void *tmp___4 ; [L7210] unsigned long ldvarg6 ; [L7211] unsigned long tmp___5 ; [L7212] struct sk_buff *ldvarg8 ; [L7213] void *tmp___6 ; [L7214] void *ldvarg7 ; [L7215] void *tmp___7 ; [L7216] struct packet_type *ldvarg11 ; [L7217] void *tmp___8 ; [L7218] struct sk_buff *ldvarg10 ; [L7219] void *tmp___9 ; [L7220] struct net_device *ldvarg12 ; [L7221] void *tmp___10 ; [L7222] struct net_device *ldvarg9 ; [L7223] void *tmp___11 ; [L7224] int tmp___12 ; [L7225] int tmp___13 ; [L7226] int tmp___14 ; [L7227] int tmp___15 ; [L7228] int tmp___16 ; [L7229] int tmp___17 ; [L7231] tmp = __VERIFIER_nondet_int() [L7232] ldvarg1 = tmp [L7233] tmp___0 = __VERIFIER_nondet_int() [L7234] ldvarg3 = tmp___0 [L7235] tmp___1 = __VERIFIER_nondet_int() [L7236] ldvarg0 = tmp___1 [L7237] tmp___2 = __VERIFIER_nondet_int() [L7238] ldvarg2 = tmp___2 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=-2, ldvarg1=0, ldvarg2=0, ldvarg3=0, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___2=0] [L7239] CALL, EXPR ldv_successful_zalloc(24UL) VAL [\old(__size)=24, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=24, __size=24, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-3:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=24, __size=24, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-3:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-3:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=24, __size=24, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-3:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-3:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=24, \result={-3:0}, __size=24, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-3:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-3:0}, ref_cnt=0, set_impl={29:0}] [L7239] RET, EXPR ldv_successful_zalloc(24UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_successful_zalloc(24UL)={-3:0}, ldvarg0=-2, ldvarg1=0, ldvarg2=0, ldvarg3=0, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___2=0] [L7239] tmp___3 = ldv_successful_zalloc(24UL) [L7240] ldvarg4 = (struct notifier_block *)tmp___3 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=-2, ldvarg1=0, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___2=0, tmp___3={-3:0}] [L7241] CALL, EXPR ldv_successful_zalloc(1UL) VAL [\old(__size)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=1, __size=1, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-4:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=1, __size=1, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-4:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-4:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=1, __size=1, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-4:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-4:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=1, \result={-4:0}, __size=1, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-4:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-4:0}, ref_cnt=0, set_impl={29:0}] [L7241] RET, EXPR ldv_successful_zalloc(1UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_successful_zalloc(1UL)={-4:0}, ldvarg0=-2, ldvarg1=0, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___2=0, tmp___3={-3:0}] [L7241] tmp___4 = ldv_successful_zalloc(1UL) [L7242] ldvarg5 = tmp___4 [L7243] tmp___5 = __VERIFIER_nondet_ulong() [L7244] ldvarg6 = tmp___5 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=-2, ldvarg1=0, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3] [L7245] CALL, EXPR ldv_successful_zalloc(232UL) VAL [\old(__size)=232, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-5:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-5:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-5:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-5:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-5:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=232, \result={-5:0}, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-5:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-5:0}, ref_cnt=0, set_impl={29:0}] [L7245] RET, EXPR ldv_successful_zalloc(232UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_successful_zalloc(232UL)={-5:0}, ldvarg0=-2, ldvarg1=0, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3] [L7245] tmp___6 = ldv_successful_zalloc(232UL) [L7246] ldvarg8 = (struct sk_buff *)tmp___6 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=-2, ldvarg1=0, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg8={-5:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}] [L7247] CALL, EXPR ldv_successful_zalloc(1UL) VAL [\old(__size)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=1, __size=1, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-6:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=1, __size=1, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-6:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-6:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=1, __size=1, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-6:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-6:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=1, \result={-6:0}, __size=1, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-6:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-6:0}, ref_cnt=0, set_impl={29:0}] [L7247] RET, EXPR ldv_successful_zalloc(1UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_successful_zalloc(1UL)={-6:0}, ldvarg0=-2, ldvarg1=0, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg8={-5:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}] [L7247] tmp___7 = ldv_successful_zalloc(1UL) [L7248] ldvarg7 = tmp___7 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=-2, ldvarg1=0, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}] [L7249] CALL, EXPR ldv_successful_zalloc(56UL) VAL [\old(__size)=56, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=56, __size=56, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-7:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=56, __size=56, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-7:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-7:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=56, __size=56, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-7:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-7:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=56, \result={-7:0}, __size=56, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-7:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-7:0}, ref_cnt=0, set_impl={29:0}] [L7249] RET, EXPR ldv_successful_zalloc(56UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_successful_zalloc(56UL)={-7:0}, ldvarg0=-2, ldvarg1=0, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}] [L7249] tmp___8 = ldv_successful_zalloc(56UL) [L7250] ldvarg11 = (struct packet_type *)tmp___8 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=-2, ldvarg1=0, ldvarg11={-7:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}] [L7251] CALL, EXPR ldv_successful_zalloc(232UL) VAL [\old(__size)=232, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-8:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-8:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-8:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-8:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-8:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=232, \result={-8:0}, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-8:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-8:0}, ref_cnt=0, set_impl={29:0}] [L7251] RET, EXPR ldv_successful_zalloc(232UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_successful_zalloc(232UL)={-8:0}, ldvarg0=-2, ldvarg1=0, ldvarg11={-7:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}] [L7251] tmp___9 = ldv_successful_zalloc(232UL) [L7252] ldvarg10 = (struct sk_buff *)tmp___9 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=-2, ldvarg1=0, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7253] CALL, EXPR ldv_successful_zalloc(3264UL) VAL [\old(__size)=3264, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-9:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-9:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-9:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-9:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-9:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=3264, \result={-9:0}, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-9:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-9:0}, ref_cnt=0, set_impl={29:0}] [L7253] RET, EXPR ldv_successful_zalloc(3264UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_successful_zalloc(3264UL)={-9:0}, ldvarg0=-2, ldvarg1=0, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7253] tmp___10 = ldv_successful_zalloc(3264UL) [L7254] ldvarg12 = (struct net_device *)tmp___10 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=-2, ldvarg1=0, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___10={-9:0}, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7255] CALL, EXPR ldv_successful_zalloc(3264UL) VAL [\old(__size)=3264, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-10:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-10:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-10:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-10:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-10:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=3264, \result={-10:0}, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-10:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-10:0}, ref_cnt=0, set_impl={29:0}] [L7255] RET, EXPR ldv_successful_zalloc(3264UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_successful_zalloc(3264UL)={-10:0}, ldvarg0=-2, ldvarg1=0, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___10={-9:0}, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7255] tmp___11 = ldv_successful_zalloc(3264UL) [L7256] ldvarg9 = (struct net_device *)tmp___11 [L7257] CALL ldv_initialize() [L7761] CALL ldv_set_init(LDV_SKBS) [L7613] set = set_impl [L7614] last_index = 0 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set={29:0}, set={0:0}, set_impl={29:0}] [L7761] RET ldv_set_init(LDV_SKBS) [L7257] RET ldv_initialize() [L7258] ldv_state_variable_4 = 0 [L7259] ldv_state_variable_1 = 0 [L7260] ref_cnt = 0 [L7261] ldv_state_variable_0 = 1 [L7262] ldv_state_variable_3 = 0 [L7263] ldv_state_variable_2 = 0 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=-2, ldvarg1=0, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___10={-9:0}, tmp___11={-10:0}, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7265] tmp___12 = __VERIFIER_nondet_int() [L7267] case 0: [L7354] case 1: [L7372] case 2: VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=-2, ldvarg1=0, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=2, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7373] COND TRUE ldv_state_variable_0 != 0 [L7374] tmp___15 = __VERIFIER_nondet_int() [L7376] case 0: [L7384] case 1: VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=-2, ldvarg1=0, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=2, tmp___15=1, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7385] COND TRUE ldv_state_variable_0 == 1 [L7386] CALL, EXPR lapbeth_init_driver() [L7132] FCALL dev_add_pack(& lapbeth_packet_type) [L7133] CALL register_netdevice_notifier(& lapbeth_dev_notifier) [L7932] return __VERIFIER_nondet_int(); [L7133] RET register_netdevice_notifier(& lapbeth_dev_notifier) [L7135] return (0); VAL [\result=0, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L7386] RET, EXPR lapbeth_init_driver() [L7386] ldv_retval_0 = lapbeth_init_driver() [L7387] COND TRUE ldv_retval_0 == 0 [L7388] ldv_state_variable_0 = 3 [L7389] ldv_state_variable_2 = 1 [L7390] ldv_state_variable_3 = 1 [L7391] CALL ldv_net_device_ops_3() [L7177] void *tmp ; VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L7179] CALL, EXPR ldv_successful_zalloc(3264UL) VAL [\old(__size)=3264, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-11:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-11:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, p={-11:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-11:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, p={-11:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=3264, \result={-11:0}, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-11:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, p={-11:0}, ref_cnt=0, set_impl={29:0}] [L7179] RET, EXPR ldv_successful_zalloc(3264UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_successful_zalloc(3264UL)={-11:0}, ref_cnt=0, set_impl={29:0}] [L7179] tmp = ldv_successful_zalloc(3264UL) [L7180] lapbeth_netdev_ops_group1 = (struct net_device *)tmp VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}, tmp={-11:0}] [L7391] RET ldv_net_device_ops_3() [L7392] ldv_state_variable_1 = 1 [L7393] ldv_state_variable_4 = 1 [L7394] CALL ldv_initialize_lapb_register_struct_4() [L7186] void *tmp ; [L7187] void *tmp___0 ; VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L7189] CALL, EXPR ldv_successful_zalloc(3264UL) VAL [\old(__size)=3264, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-12:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-12:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, p={-12:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-12:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, p={-12:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=3264, \result={-12:0}, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-12:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, p={-12:0}, ref_cnt=0, set_impl={29:0}] [L7189] RET, EXPR ldv_successful_zalloc(3264UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_successful_zalloc(3264UL)={-12:0}, ref_cnt=0, set_impl={29:0}] [L7189] tmp = ldv_successful_zalloc(3264UL) [L7190] lapbeth_callbacks_group1 = (struct net_device *)tmp VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}, tmp={-12:0}] [L7191] CALL, EXPR ldv_successful_zalloc(232UL) VAL [\old(__size)=232, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-13:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-13:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, p={-13:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-13:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, p={-13:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=232, \result={-13:0}, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-13:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, p={-13:0}, ref_cnt=0, set_impl={29:0}] [L7191] RET, EXPR ldv_successful_zalloc(232UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_successful_zalloc(232UL)={-13:0}, ref_cnt=0, set_impl={29:0}, tmp={-12:0}] [L7191] tmp___0 = ldv_successful_zalloc(232UL) [L7192] lapbeth_callbacks_group0 = (struct sk_buff *)tmp___0 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}, tmp={-12:0}, tmp___0={-13:0}] [L7394] RET ldv_initialize_lapb_register_struct_4() [L7397] COND FALSE !(ldv_retval_0 != 0) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=-2, ldvarg1=0, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=2, tmp___15=1, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7265] tmp___12 = __VERIFIER_nondet_int() [L7267] case 0: VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=-2, ldvarg1=0, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=0, tmp___15=1, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7268] COND TRUE ldv_state_variable_4 != 0 [L7269] tmp___13 = __VERIFIER_nondet_int() [L7271] case 0: [L7283] case 1: [L7295] case 2: [L7303] case 3: [L7315] case 4: [L7327] case 5: VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=-2, ldvarg1=0, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=0, tmp___13=5, tmp___15=1, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7328] COND TRUE ldv_state_variable_4 == 1 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=-2, ldvarg1=0, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=0, tmp___13=5, tmp___15=1, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7329] CALL lapbeth_disconnected(lapbeth_callbacks_group1, ldvarg0) VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6936] unsigned char *ptr ; [L6937] struct sk_buff *skb ; [L6938] struct sk_buff *tmp ; VAL [\old(last_index)=0, \old(reason)=-2, banner={28:0}, bcast_addr={22:0}, dev={-12:0}, dev={-12:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, reason=-2, ref_cnt=0, set_impl={29:0}] [L6940] CALL, EXPR ldv_dev_alloc_skb_18(1U) VAL [\old(last_index)=0, \old(length)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L7584] struct sk_buff *tmp ; VAL [\old(last_index)=0, \old(length)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, length=1, ref_cnt=0, set_impl={29:0}] [L7586] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L7745] void *skb ; [L7746] void *tmp___7 ; VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L7748] CALL, EXPR ldv_successful_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(__size)=248, \old(last_index)=0, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=248, \old(last_index)=0, __size=248, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={18446744073709551616:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=248, \old(last_index)=0, __size=248, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={18446744073709551616:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, p={18446744073709551616:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, \old(last_index)=0, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, \old(last_index)=0, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=248, \old(last_index)=0, __size=248, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={18446744073709551616:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, p={18446744073709551616:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=248, \old(last_index)=0, \result={18446744073709551616:0}, __size=248, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={18446744073709551616:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, p={18446744073709551616:0}, ref_cnt=0, set_impl={29:0}] [L7748] RET, EXPR ldv_successful_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_successful_zalloc(sizeof(struct sk_buff___0 ))={18446744073709551616:0}, ref_cnt=0, set_impl={29:0}] [L7748] tmp___7 = ldv_successful_zalloc(sizeof(struct sk_buff___0 )) [L7749] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}, skb={18446744073709551616:0}, tmp___7={18446744073709551616:0}] [L7750] COND FALSE !(! skb) [L7753] CALL ldv_set_add(LDV_SKBS, skb) [L7621] int i ; [L7623] i = 0 VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, e={18446744073709551616:0}, e={18446744073709551616:0}, i=0, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set={0:0}, set={0:0}, set_impl={29:0}] [L7624] COND TRUE 1 VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, e={18446744073709551616:0}, e={18446744073709551616:0}, i=0, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set={0:0}, set={0:0}, set_impl={29:0}] [L7625] COND FALSE !(i < last_index) VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, e={18446744073709551616:0}, e={18446744073709551616:0}, i=0, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set={0:0}, set={0:0}, set_impl={29:0}] [L7635] COND TRUE last_index < 15 [L7636] set_impl[last_index] = e [L7637] last_index = last_index + 1 VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, e={18446744073709551616:0}, e={18446744073709551616:0}, i=0, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set={0:0}, set={0:0}, set_impl={29:0}] [L7753] RET ldv_set_add(LDV_SKBS, skb) [L7754] return (skb); VAL [\old(last_index)=0, \result={18446744073709551616:0}, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}, skb={18446744073709551616:0}, tmp___7={18446744073709551616:0}] [L7586] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, \old(length)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_skb_alloc()={18446744073709551616:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, length=1, ref_cnt=0, set_impl={29:0}] [L7586] tmp = ldv_skb_alloc() [L7587] return (tmp); VAL [\old(last_index)=0, \old(length)=1, \result={18446744073709551616:0}, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, length=1, ref_cnt=0, set_impl={29:0}, tmp={18446744073709551616:0}] [L6940] RET, EXPR ldv_dev_alloc_skb_18(1U) VAL [\old(last_index)=0, \old(reason)=-2, banner={28:0}, bcast_addr={22:0}, dev={-12:0}, dev={-12:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, ldv_dev_alloc_skb_18(1U)={18446744073709551616:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, reason=-2, ref_cnt=0, set_impl={29:0}] [L6940] tmp = ldv_dev_alloc_skb_18(1U) [L6941] skb = tmp VAL [\old(last_index)=0, \old(reason)=-2, banner={28:0}, bcast_addr={22:0}, dev={-12:0}, dev={-12:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, reason=-2, ref_cnt=0, set_impl={29:0}, skb={18446744073709551616:0}, tmp={18446744073709551616:0}] [L6942] COND TRUE (unsigned long )skb == (unsigned long )((struct sk_buff *)0) [L7329] RET lapbeth_disconnected(lapbeth_callbacks_group1, ldvarg0) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=-2, ldvarg1=0, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=0, tmp___13=5, tmp___15=1, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7330] ldv_state_variable_4 = 1 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=-2, ldvarg1=0, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=0, tmp___13=5, tmp___15=1, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7333] COND FALSE !(ldv_state_variable_4 == 2) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=-2, ldvarg1=0, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=0, tmp___13=5, tmp___15=1, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7265] tmp___12 = __VERIFIER_nondet_int() [L7267] case 0: [L7354] case 1: [L7372] case 2: VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=-2, ldvarg1=0, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=2, tmp___13=5, tmp___15=1, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7373] COND TRUE ldv_state_variable_0 != 0 [L7374] tmp___15 = __VERIFIER_nondet_int() [L7376] case 0: VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=-2, ldvarg1=0, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=2, tmp___13=5, tmp___15=0, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7377] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L7378] CALL lapbeth_cleanup_driver() [L7140] struct lapbethdev *lapbeth ; [L7141] struct list_head *entry ; [L7142] struct list_head *tmp ; [L7143] struct list_head const *__mptr ; [L7145] FCALL dev_remove_pack(& lapbeth_packet_type) [L7146] CALL unregister_netdevice_notifier(& lapbeth_dev_notifier) [L7963] return __VERIFIER_nondet_int(); [L7146] RET unregister_netdevice_notifier(& lapbeth_dev_notifier) [L7147] FCALL rtnl_lock() [L7148] EXPR lapbeth_devices.next [L7148] entry = lapbeth_devices.next [L7149] EXPR entry->next [L7149] tmp = entry->next [L7159] COND FALSE !((unsigned long )entry != (unsigned long )(& lapbeth_devices)) [L7163] FCALL rtnl_unlock() [L7378] RET lapbeth_cleanup_driver() [L7379] ldv_state_variable_0 = 2 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=-2, ldvarg1=0, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=2, tmp___13=5, tmp___15=0, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7507] CALL ldv_check_final_state() [L7812] int tmp___7 ; [L7814] CALL, EXPR ldv_set_is_empty(LDV_SKBS) [L7703] return (last_index == 0); VAL [\result=0, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set={0:0}, set={0:0}, set_impl={29:0}] [L7814] RET, EXPR ldv_set_is_empty(LDV_SKBS) [L7814] tmp___7 = ldv_set_is_empty(LDV_SKBS) [L7815] COND FALSE !(\read(tmp___7)) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}, tmp___7=0] [L7817] CALL ldv_error() VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6079] reach_error() VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 36 procedures, 728 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 11.4s, OverallIterations: 7, TraceHistogramMax: 12, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 7.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 7657 SdHoareTripleChecker+Valid, 6.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 7406 mSDsluCounter, 23026 SdHoareTripleChecker+Invalid, 5.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 15207 mSDsCounter, 1753 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4966 IncrementalHoareTripleChecker+Invalid, 6719 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1753 mSolverCounterUnsat, 7819 mSDtfsCounter, 4966 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 421 GetRequests, 385 SyntacticMatches, 0 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 17 ImplicationChecksByTransitivity, 0.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=5330occurred in iteration=6, InterpolantAutomatonStates: 41, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.7s AutomataMinimizationTime, 6 MinimizatonAttempts, 1298 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 1.9s InterpolantComputationTime, 1431 NumberOfCodeBlocks, 1431 NumberOfCodeBlocksAsserted, 7 NumberOfCheckSat, 1164 ConstructedInterpolants, 0 QuantifiedInterpolants, 2022 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 6 InterpolantComputations, 6 PerfectInterpolantSequences, 3670/3670 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! [2022-07-19 23:33:26,459 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Writing human readable error path to file UltimateCounterExample.errorpath Result: FALSE