./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_ppp.ko-entry_point_false-unreach-call.cil.out.c --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version aa418289 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan/config/TaipanReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_ppp.ko-entry_point_false-unreach-call.cil.out.c -s /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan/config/svcomp-Reach-64bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 6186ef142a0a91a64444136f0ec69676cad8008d ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan/config/TaipanReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_ppp.ko-entry_point_false-unreach-call.cil.out.c -s /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan/config/svcomp-Reach-64bit-Taipan_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 6186ef142a0a91a64444136f0ec69676cad8008d ...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Writing human readable error path to file UltimateCounterExample.errorpath Result: FALSE --- Real Ultimate output --- This is Ultimate 0.1.23-aa41828 [2018-11-23 13:38:19,437 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 13:38:19,438 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 13:38:19,446 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 13:38:19,446 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 13:38:19,446 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 13:38:19,447 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 13:38:19,448 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 13:38:19,449 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 13:38:19,450 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 13:38:19,451 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 13:38:19,451 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 13:38:19,451 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 13:38:19,452 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 13:38:19,453 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 13:38:19,453 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 13:38:19,453 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 13:38:19,455 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 13:38:19,456 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 13:38:19,456 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 13:38:19,457 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 13:38:19,458 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 13:38:19,459 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 13:38:19,460 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 13:38:19,460 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 13:38:19,460 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 13:38:19,461 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 13:38:19,461 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 13:38:19,462 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 13:38:19,462 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 13:38:19,463 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 13:38:19,463 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 13:38:19,463 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 13:38:19,463 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 13:38:19,464 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 13:38:19,464 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 13:38:19,465 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan/config/svcomp-Reach-64bit-Taipan_Default.epf [2018-11-23 13:38:19,472 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 13:38:19,472 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 13:38:19,473 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 13:38:19,473 INFO L133 SettingsManager]: * ... calls to implemented procedures=ONLY_FOR_CONCURRENT_PROGRAMS [2018-11-23 13:38:19,473 INFO L133 SettingsManager]: * User list type=DISABLED [2018-11-23 13:38:19,474 INFO L131 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2018-11-23 13:38:19,474 INFO L133 SettingsManager]: * Explicit value domain=true [2018-11-23 13:38:19,474 INFO L133 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2018-11-23 13:38:19,474 INFO L133 SettingsManager]: * Octagon Domain=false [2018-11-23 13:38:19,474 INFO L133 SettingsManager]: * Abstract domain=CompoundDomain [2018-11-23 13:38:19,474 INFO L133 SettingsManager]: * Log string format=TERM [2018-11-23 13:38:19,474 INFO L133 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2018-11-23 13:38:19,475 INFO L133 SettingsManager]: * Use the RCFG-of-the-future interface=true [2018-11-23 13:38:19,475 INFO L133 SettingsManager]: * Interval Domain=false [2018-11-23 13:38:19,475 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 13:38:19,475 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-23 13:38:19,475 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 13:38:19,476 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 13:38:19,476 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 13:38:19,476 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 13:38:19,476 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 13:38:19,476 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 13:38:19,476 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 13:38:19,476 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 13:38:19,477 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-23 13:38:19,477 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 13:38:19,477 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-23 13:38:19,477 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 13:38:19,477 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 13:38:19,477 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 13:38:19,477 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 13:38:19,478 INFO L133 SettingsManager]: * Trace refinement strategy=TAIPAN [2018-11-23 13:38:19,478 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 13:38:19,478 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-11-23 13:38:19,478 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-23 13:38:19,478 INFO L133 SettingsManager]: * To the following directory=dump/ [2018-11-23 13:38:19,478 INFO L133 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 6186ef142a0a91a64444136f0ec69676cad8008d [2018-11-23 13:38:19,502 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 13:38:19,512 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 13:38:19,514 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 13:38:19,516 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 13:38:19,516 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 13:38:19,517 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_ppp.ko-entry_point_false-unreach-call.cil.out.c [2018-11-23 13:38:19,562 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan/data/c5ffe6612/07dfe6af7697499882ff77c2e0fb77c7/FLAGe97b6c23e [2018-11-23 13:38:20,114 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 13:38:20,115 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_ppp.ko-entry_point_false-unreach-call.cil.out.c [2018-11-23 13:38:20,142 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan/data/c5ffe6612/07dfe6af7697499882ff77c2e0fb77c7/FLAGe97b6c23e [2018-11-23 13:38:20,536 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan/data/c5ffe6612/07dfe6af7697499882ff77c2e0fb77c7 [2018-11-23 13:38:20,538 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 13:38:20,539 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 13:38:20,540 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 13:38:20,540 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 13:38:20,542 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 13:38:20,543 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 01:38:20" (1/1) ... [2018-11-23 13:38:20,545 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@c54decc and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:38:20, skipping insertion in model container [2018-11-23 13:38:20,545 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 01:38:20" (1/1) ... [2018-11-23 13:38:20,552 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 13:38:20,618 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 13:38:21,546 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 13:38:21,561 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 13:38:21,708 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 13:38:21,767 INFO L195 MainTranslator]: Completed translation [2018-11-23 13:38:21,767 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:38:21 WrapperNode [2018-11-23 13:38:21,768 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 13:38:21,768 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 13:38:21,768 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 13:38:21,768 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 13:38:21,775 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:38:21" (1/1) ... [2018-11-23 13:38:21,801 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:38:21" (1/1) ... [2018-11-23 13:38:21,811 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 13:38:21,811 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 13:38:21,811 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 13:38:21,811 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 13:38:21,819 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:38:21" (1/1) ... [2018-11-23 13:38:21,819 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:38:21" (1/1) ... [2018-11-23 13:38:21,829 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:38:21" (1/1) ... [2018-11-23 13:38:21,830 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:38:21" (1/1) ... [2018-11-23 13:38:21,870 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:38:21" (1/1) ... [2018-11-23 13:38:21,879 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:38:21" (1/1) ... [2018-11-23 13:38:21,887 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:38:21" (1/1) ... [2018-11-23 13:38:21,895 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 13:38:21,896 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 13:38:21,896 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 13:38:21,896 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 13:38:21,897 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:38:21" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 13:38:21,939 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_13 [2018-11-23 13:38:21,940 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_13 [2018-11-23 13:38:21,940 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_hard_header [2018-11-23 13:38:21,940 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_hard_header [2018-11-23 13:38:21,940 INFO L130 BoogieDeclarations]: Found specification of procedure __raw_spin_lock_init [2018-11-23 13:38:21,940 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_start [2018-11-23 13:38:21,940 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_start [2018-11-23 13:38:21,940 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_rx [2018-11-23 13:38:21,940 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_rx [2018-11-23 13:38:21,941 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2018-11-23 13:38:21,941 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_type_trans [2018-11-23 13:38:21,941 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_type_trans [2018-11-23 13:38:21,941 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~int~X~int~TO~int [2018-11-23 13:38:21,941 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~int~X~int~TO~int [2018-11-23 13:38:21,941 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_init [2018-11-23 13:38:21,941 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_init [2018-11-23 13:38:21,941 INFO L130 BoogieDeclarations]: Found specification of procedure skb_reserve [2018-11-23 13:38:21,941 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_reserve [2018-11-23 13:38:21,941 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 13:38:21,941 INFO L130 BoogieDeclarations]: Found specification of procedure activate_pending_timer_1 [2018-11-23 13:38:21,942 INFO L138 BoogieDeclarations]: Found implementation of procedure activate_pending_timer_1 [2018-11-23 13:38:21,942 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_setup_3 [2018-11-23 13:38:21,942 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2018-11-23 13:38:21,942 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2018-11-23 13:38:21,942 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize [2018-11-23 13:38:21,942 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_initialize [2018-11-23 13:38:21,942 INFO L130 BoogieDeclarations]: Found specification of procedure dev_queue_xmit [2018-11-23 13:38:21,942 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2018-11-23 13:38:21,942 INFO L130 BoogieDeclarations]: Found specification of procedure netif_dormant_off [2018-11-23 13:38:21,942 INFO L138 BoogieDeclarations]: Found implementation of procedure netif_dormant_off [2018-11-23 13:38:21,943 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2018-11-23 13:38:21,943 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2018-11-23 13:38:21,943 INFO L130 BoogieDeclarations]: Found specification of procedure skb_queue_head_init [2018-11-23 13:38:21,943 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_queue_head_init [2018-11-23 13:38:21,943 INFO L130 BoogieDeclarations]: Found specification of procedure dev_to_hdlc [2018-11-23 13:38:21,943 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_to_hdlc [2018-11-23 13:38:21,943 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2018-11-23 13:38:21,943 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2018-11-23 13:38:21,943 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2018-11-23 13:38:21,943 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_disconnect_3 [2018-11-23 13:38:21,944 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2018-11-23 13:38:21,944 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2018-11-23 13:38:21,944 INFO L130 BoogieDeclarations]: Found specification of procedure netif_dormant_on [2018-11-23 13:38:21,944 INFO L138 BoogieDeclarations]: Found implementation of procedure netif_dormant_on [2018-11-23 13:38:21,944 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2018-11-23 13:38:21,944 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2018-11-23 13:38:21,944 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2018-11-23 13:38:21,944 INFO L130 BoogieDeclarations]: Found specification of procedure __skb_queue_head_init [2018-11-23 13:38:21,944 INFO L138 BoogieDeclarations]: Found implementation of procedure __skb_queue_head_init [2018-11-23 13:38:21,945 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2018-11-23 13:38:21,945 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2018-11-23 13:38:21,945 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2018-11-23 13:38:21,945 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_release_3 [2018-11-23 13:38:21,945 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_tx_flush [2018-11-23 13:38:21,945 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_tx_flush [2018-11-23 13:38:21,945 INFO L130 BoogieDeclarations]: Found specification of procedure skb_pull [2018-11-23 13:38:21,945 INFO L130 BoogieDeclarations]: Found specification of procedure skb_reset_network_header [2018-11-23 13:38:21,945 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_reset_network_header [2018-11-23 13:38:21,946 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_dequeue_12 [2018-11-23 13:38:21,946 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_dequeue_12 [2018-11-23 13:38:21,946 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2018-11-23 13:38:21,946 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2018-11-23 13:38:21,946 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_timer [2018-11-23 13:38:21,946 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_timer [2018-11-23 13:38:21,946 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_open_3 [2018-11-23 13:38:21,946 INFO L130 BoogieDeclarations]: Found specification of procedure del_timer [2018-11-23 13:38:21,946 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-23 13:38:21,947 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-23 13:38:21,947 INFO L130 BoogieDeclarations]: Found specification of procedure disable_suitable_timer_1 [2018-11-23 13:38:21,947 INFO L138 BoogieDeclarations]: Found implementation of procedure disable_suitable_timer_1 [2018-11-23 13:38:21,947 INFO L130 BoogieDeclarations]: Found specification of procedure test_and_set_bit [2018-11-23 13:38:21,947 INFO L138 BoogieDeclarations]: Found implementation of procedure test_and_set_bit [2018-11-23 13:38:21,947 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2018-11-23 13:38:21,947 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2018-11-23 13:38:21,947 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2018-11-23 13:38:21,947 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2018-11-23 13:38:21,948 INFO L130 BoogieDeclarations]: Found specification of procedure __kmalloc [2018-11-23 13:38:21,948 INFO L138 BoogieDeclarations]: Found implementation of procedure __kmalloc [2018-11-23 13:38:21,948 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-23 13:38:21,948 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-23 13:38:21,948 INFO L130 BoogieDeclarations]: Found specification of procedure get_ppp [2018-11-23 13:38:21,948 INFO L138 BoogieDeclarations]: Found implementation of procedure get_ppp [2018-11-23 13:38:21,948 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-23 13:38:21,948 INFO L130 BoogieDeclarations]: Found specification of procedure get_proto [2018-11-23 13:38:21,948 INFO L138 BoogieDeclarations]: Found implementation of procedure get_proto [2018-11-23 13:38:21,948 INFO L130 BoogieDeclarations]: Found specification of procedure memcmp [2018-11-23 13:38:21,949 INFO L130 BoogieDeclarations]: Found specification of procedure reg_timer_1 [2018-11-23 13:38:21,949 INFO L138 BoogieDeclarations]: Found implementation of procedure reg_timer_1 [2018-11-23 13:38:21,949 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_add [2018-11-23 13:38:21,949 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_add [2018-11-23 13:38:21,949 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_close [2018-11-23 13:38:21,949 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_close [2018-11-23 13:38:21,949 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_unlock_irqrestore [2018-11-23 13:38:21,949 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_tx_cp [2018-11-23 13:38:21,949 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_tx_cp [2018-11-23 13:38:21,949 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-23 13:38:21,950 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_is_empty [2018-11-23 13:38:21,950 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_is_empty [2018-11-23 13:38:21,950 INFO L130 BoogieDeclarations]: Found specification of procedure attach_hdlc_protocol [2018-11-23 13:38:21,950 INFO L130 BoogieDeclarations]: Found specification of procedure add_timer [2018-11-23 13:38:21,950 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_mod_timer_15 [2018-11-23 13:38:21,950 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_mod_timer_15 [2018-11-23 13:38:21,950 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_mod_timer_14 [2018-11-23 13:38:21,950 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_mod_timer_14 [2018-11-23 13:38:21,950 INFO L130 BoogieDeclarations]: Found specification of procedure mod_timer [2018-11-23 13:38:21,950 INFO L130 BoogieDeclarations]: Found specification of procedure register_hdlc_protocol [2018-11-23 13:38:21,950 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2018-11-23 13:38:21,951 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2018-11-23 13:38:21,951 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_cp_parse_cr [2018-11-23 13:38:21,951 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_cp_parse_cr [2018-11-23 13:38:21,951 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_stop [2018-11-23 13:38:21,951 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_stop [2018-11-23 13:38:21,951 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2018-11-23 13:38:21,951 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-23 13:38:21,951 INFO L130 BoogieDeclarations]: Found specification of procedure skb_queue_tail [2018-11-23 13:38:21,951 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_cp_event [2018-11-23 13:38:21,951 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_cp_event [2018-11-23 13:38:21,951 INFO L130 BoogieDeclarations]: Found specification of procedure capable [2018-11-23 13:38:21,952 INFO L130 BoogieDeclarations]: Found specification of procedure unregister_hdlc_protocol [2018-11-23 13:38:21,952 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2018-11-23 13:38:21,952 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2018-11-23 13:38:21,952 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2018-11-23 13:38:21,952 INFO L130 BoogieDeclarations]: Found specification of procedure __fswab16 [2018-11-23 13:38:21,952 INFO L138 BoogieDeclarations]: Found implementation of procedure __fswab16 [2018-11-23 13:38:21,952 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2018-11-23 13:38:21,952 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~int~TO~VOID [2018-11-23 13:38:21,952 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~int~TO~VOID [2018-11-23 13:38:21,952 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize_hdlc_proto_3 [2018-11-23 13:38:21,952 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_initialize_hdlc_proto_3 [2018-11-23 13:38:21,953 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_ioctl [2018-11-23 13:38:21,953 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_ioctl [2018-11-23 13:38:21,953 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_del_timer_16 [2018-11-23 13:38:21,953 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_del_timer_16 [2018-11-23 13:38:21,953 INFO L130 BoogieDeclarations]: Found specification of procedure netdev_priv [2018-11-23 13:38:21,953 INFO L138 BoogieDeclarations]: Found implementation of procedure netdev_priv [2018-11-23 13:38:21,953 INFO L130 BoogieDeclarations]: Found specification of procedure choose_timer_1 [2018-11-23 13:38:21,953 INFO L138 BoogieDeclarations]: Found implementation of procedure choose_timer_1 [2018-11-23 13:38:21,953 INFO L130 BoogieDeclarations]: Found specification of procedure mod_init [2018-11-23 13:38:21,953 INFO L138 BoogieDeclarations]: Found implementation of procedure mod_init [2018-11-23 13:38:21,953 INFO L130 BoogieDeclarations]: Found specification of procedure proto_name [2018-11-23 13:38:21,954 INFO L138 BoogieDeclarations]: Found implementation of procedure proto_name [2018-11-23 13:38:21,954 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-11-23 13:38:21,954 INFO L130 BoogieDeclarations]: Found specification of procedure linkwatch_fire_event [2018-11-23 13:38:21,954 INFO L130 BoogieDeclarations]: Found specification of procedure __dev_kfree_skb_any [2018-11-23 13:38:21,954 INFO L130 BoogieDeclarations]: Found specification of procedure test_and_clear_bit [2018-11-23 13:38:21,954 INFO L138 BoogieDeclarations]: Found implementation of procedure test_and_clear_bit [2018-11-23 13:38:21,954 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_final_state [2018-11-23 13:38:21,954 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_final_state [2018-11-23 13:38:21,954 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2018-11-23 13:38:21,954 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2018-11-23 13:38:21,954 INFO L130 BoogieDeclarations]: Found specification of procedure mod_exit [2018-11-23 13:38:21,955 INFO L138 BoogieDeclarations]: Found implementation of procedure mod_exit [2018-11-23 13:38:21,955 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 13:38:21,955 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 13:38:23,222 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 13:38:23,223 INFO L280 CfgBuilder]: Removed 1 assue(true) statements. [2018-11-23 13:38:23,223 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 01:38:23 BoogieIcfgContainer [2018-11-23 13:38:23,223 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 13:38:23,223 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-23 13:38:23,224 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-23 13:38:23,225 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-23 13:38:23,226 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 01:38:20" (1/3) ... [2018-11-23 13:38:23,226 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@da74458 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 01:38:23, skipping insertion in model container [2018-11-23 13:38:23,226 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:38:21" (2/3) ... [2018-11-23 13:38:23,227 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@da74458 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 01:38:23, skipping insertion in model container [2018-11-23 13:38:23,227 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 01:38:23" (3/3) ... [2018-11-23 13:38:23,228 INFO L112 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_ppp.ko-entry_point_false-unreach-call.cil.out.c [2018-11-23 13:38:23,234 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-23 13:38:23,240 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-23 13:38:23,250 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-23 13:38:23,276 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-23 13:38:23,276 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-23 13:38:23,276 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-23 13:38:23,276 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-23 13:38:23,276 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-23 13:38:23,277 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-23 13:38:23,277 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-23 13:38:23,277 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-23 13:38:23,298 INFO L276 IsEmpty]: Start isEmpty. Operand 634 states. [2018-11-23 13:38:23,307 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2018-11-23 13:38:23,307 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:38:23,308 INFO L402 BasicCegarLoop]: trace histogram [5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:38:23,310 INFO L423 AbstractCegarLoop]: === Iteration 1 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:38:23,313 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:38:23,313 INFO L82 PathProgramCache]: Analyzing trace with hash -682356175, now seen corresponding path program 1 times [2018-11-23 13:38:23,315 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 13:38:23,357 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:38:23,357 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:38:23,357 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:38:23,357 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 13:38:23,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:38:23,573 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2018-11-23 13:38:23,574 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:38:23,574 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 13:38:23,575 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 13:38:23,578 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 13:38:23,586 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 13:38:23,586 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 13:38:23,588 INFO L87 Difference]: Start difference. First operand 634 states. Second operand 3 states. [2018-11-23 13:38:23,739 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:38:23,739 INFO L93 Difference]: Finished difference Result 1802 states and 2638 transitions. [2018-11-23 13:38:23,741 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 13:38:23,742 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 65 [2018-11-23 13:38:23,742 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:38:23,759 INFO L225 Difference]: With dead ends: 1802 [2018-11-23 13:38:23,759 INFO L226 Difference]: Without dead ends: 1171 [2018-11-23 13:38:23,767 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 13:38:23,781 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1171 states. [2018-11-23 13:38:23,852 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1171 to 1171. [2018-11-23 13:38:23,853 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1171 states. [2018-11-23 13:38:23,858 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1171 states to 1171 states and 1642 transitions. [2018-11-23 13:38:23,860 INFO L78 Accepts]: Start accepts. Automaton has 1171 states and 1642 transitions. Word has length 65 [2018-11-23 13:38:23,860 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:38:23,861 INFO L480 AbstractCegarLoop]: Abstraction has 1171 states and 1642 transitions. [2018-11-23 13:38:23,861 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 13:38:23,861 INFO L276 IsEmpty]: Start isEmpty. Operand 1171 states and 1642 transitions. [2018-11-23 13:38:23,865 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2018-11-23 13:38:23,865 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:38:23,866 INFO L402 BasicCegarLoop]: trace histogram [5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:38:23,866 INFO L423 AbstractCegarLoop]: === Iteration 2 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:38:23,866 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:38:23,866 INFO L82 PathProgramCache]: Analyzing trace with hash -1968822385, now seen corresponding path program 1 times [2018-11-23 13:38:23,866 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 13:38:23,870 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:38:23,870 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:38:23,870 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:38:23,870 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 13:38:23,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:38:23,982 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2018-11-23 13:38:23,982 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:38:23,982 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 13:38:23,983 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 13:38:23,984 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 13:38:23,984 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 13:38:23,984 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 13:38:23,984 INFO L87 Difference]: Start difference. First operand 1171 states and 1642 transitions. Second operand 5 states. [2018-11-23 13:38:24,056 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:38:24,057 INFO L93 Difference]: Finished difference Result 2317 states and 3253 transitions. [2018-11-23 13:38:24,058 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 13:38:24,058 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 82 [2018-11-23 13:38:24,058 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:38:24,065 INFO L225 Difference]: With dead ends: 2317 [2018-11-23 13:38:24,065 INFO L226 Difference]: Without dead ends: 1170 [2018-11-23 13:38:24,070 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2018-11-23 13:38:24,072 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1170 states. [2018-11-23 13:38:24,103 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1170 to 1170. [2018-11-23 13:38:24,103 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1170 states. [2018-11-23 13:38:24,108 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1170 states to 1170 states and 1638 transitions. [2018-11-23 13:38:24,108 INFO L78 Accepts]: Start accepts. Automaton has 1170 states and 1638 transitions. Word has length 82 [2018-11-23 13:38:24,109 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:38:24,109 INFO L480 AbstractCegarLoop]: Abstraction has 1170 states and 1638 transitions. [2018-11-23 13:38:24,109 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 13:38:24,109 INFO L276 IsEmpty]: Start isEmpty. Operand 1170 states and 1638 transitions. [2018-11-23 13:38:24,114 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2018-11-23 13:38:24,114 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:38:24,114 INFO L402 BasicCegarLoop]: trace histogram [7, 7, 7, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:38:24,115 INFO L423 AbstractCegarLoop]: === Iteration 3 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:38:24,115 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:38:24,115 INFO L82 PathProgramCache]: Analyzing trace with hash 697504420, now seen corresponding path program 1 times [2018-11-23 13:38:24,115 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 13:38:24,117 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:38:24,118 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:38:24,118 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:38:24,118 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 13:38:24,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:38:24,246 INFO L134 CoverageAnalysis]: Checked inductivity of 89 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 84 trivial. 0 not checked. [2018-11-23 13:38:24,246 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-23 13:38:24,246 INFO L192 anRefinementStrategy]: Switched to InterpolantGenerator mode ABSTRACT_INTERPRETATION [2018-11-23 13:38:24,247 INFO L200 CegarAbsIntRunner]: Running AI on error trace of length 110 with the following transitions: [2018-11-23 13:38:24,248 INFO L202 CegarAbsIntRunner]: [254], [256], [258], [260], [262], [264], [266], [268], [280], [283], [286], [289], [292], [294], [298], [301], [304], [306], [309], [318], [670], [671], [750], [801], [803], [805], [806], [811], [812], [1144], [1145], [1146], [1178], [1180], [1182], [1183], [1314], [1315], [1336], [1337], [1340], [1342], [1347], [1359], [1362], [1366], [1367], [1368], [1372], [1373], [1426], [1427], [1428], [1429], [1430], [1431], [1432], [1433], [1434], [1435], [1436], [1437], [1440], [1441], [1442], [1443], [1444], [1445], [1492], [1502], [1503], [1520], [1521], [1522], [1523], [1602], [1603], [1604], [1605], [1640], [1641], [1642], [1643], [1644], [1648], [1649], [1650] [2018-11-23 13:38:24,280 INFO L148 AbstractInterpreter]: Using domain PoormanAbstractDomain with backing domain CompoundDomain [CongruenceDomain, ExplicitValueDomain] [2018-11-23 13:38:24,280 INFO L101 FixpointEngine]: Starting fixpoint engine with domain PoormanAbstractDomain (maxUnwinding=3, maxParallelStates=2) [2018-11-23 13:38:25,002 INFO L266 AbstractInterpreter]: Error location(s) were unreachable [2018-11-23 13:38:25,003 INFO L272 AbstractInterpreter]: Visited 85 different actions 153 times. Merged at 13 different actions 17 times. Never widened. Performed 4389 root evaluator evaluations with a maximum evaluation depth of 5. Performed 4389 inverse root evaluator evaluations with a maximum inverse evaluation depth of 5. Found 1 fixpoints after 1 different actions. Largest state had 167 variables. [2018-11-23 13:38:25,025 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:38:25,025 INFO L398 sIntCurrentIteration]: Generating AbsInt predicates [2018-11-23 13:38:25,452 INFO L227 lantSequenceWeakener]: Weakened 105 states. On average, predicates are now at 93.95% of their original sizes. [2018-11-23 13:38:25,452 INFO L413 sIntCurrentIteration]: Unifying AI predicates [2018-11-23 13:38:25,998 INFO L415 sIntCurrentIteration]: We unified 108 AI predicates to 108 [2018-11-23 13:38:25,998 INFO L424 sIntCurrentIteration]: Finished generation of AbsInt predicates [2018-11-23 13:38:25,999 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 1 imperfect interpolant sequences. [2018-11-23 13:38:25,999 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [38] imperfect sequences [7] total 43 [2018-11-23 13:38:25,999 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 13:38:26,000 INFO L459 AbstractCegarLoop]: Interpolant automaton has 38 states [2018-11-23 13:38:26,000 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2018-11-23 13:38:26,000 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=143, Invalid=1263, Unknown=0, NotChecked=0, Total=1406 [2018-11-23 13:38:26,001 INFO L87 Difference]: Start difference. First operand 1170 states and 1638 transitions. Second operand 38 states. [2018-11-23 13:39:37,486 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:39:37,486 INFO L93 Difference]: Finished difference Result 4707 states and 6967 transitions. [2018-11-23 13:39:37,487 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 55 states. [2018-11-23 13:39:37,487 INFO L78 Accepts]: Start accepts. Automaton has 38 states. Word has length 109 [2018-11-23 13:39:37,487 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:39:37,506 INFO L225 Difference]: With dead ends: 4707 [2018-11-23 13:39:37,506 INFO L226 Difference]: Without dead ends: 3534 [2018-11-23 13:39:37,513 INFO L631 BasicCegarLoop]: 2 DeclaredPredicates, 157 GetRequests, 72 SyntacticMatches, 0 SemanticMatches, 85 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1850 ImplicationChecksByTransitivity, 1.4s TimeCoverageRelationStatistics Valid=826, Invalid=6656, Unknown=0, NotChecked=0, Total=7482 [2018-11-23 13:39:37,516 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3534 states. [2018-11-23 13:39:37,631 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3534 to 3493. [2018-11-23 13:39:37,632 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3493 states. [2018-11-23 13:39:37,641 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3493 states to 3493 states and 5084 transitions. [2018-11-23 13:39:37,642 INFO L78 Accepts]: Start accepts. Automaton has 3493 states and 5084 transitions. Word has length 109 [2018-11-23 13:39:37,642 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:39:37,642 INFO L480 AbstractCegarLoop]: Abstraction has 3493 states and 5084 transitions. [2018-11-23 13:39:37,642 INFO L481 AbstractCegarLoop]: Interpolant automaton has 38 states. [2018-11-23 13:39:37,643 INFO L276 IsEmpty]: Start isEmpty. Operand 3493 states and 5084 transitions. [2018-11-23 13:39:37,658 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 157 [2018-11-23 13:39:37,658 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:39:37,658 INFO L402 BasicCegarLoop]: trace histogram [8, 8, 8, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:39:37,658 INFO L423 AbstractCegarLoop]: === Iteration 4 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:39:37,659 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:39:37,659 INFO L82 PathProgramCache]: Analyzing trace with hash -305676393, now seen corresponding path program 1 times [2018-11-23 13:39:37,659 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 13:39:37,661 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:39:37,661 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:39:37,661 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:39:37,661 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 13:39:37,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:39:37,736 INFO L134 CoverageAnalysis]: Checked inductivity of 123 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 117 trivial. 0 not checked. [2018-11-23 13:39:37,736 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:39:37,736 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 13:39:37,736 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 13:39:37,737 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 13:39:37,737 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 13:39:37,737 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 13:39:37,737 INFO L87 Difference]: Start difference. First operand 3493 states and 5084 transitions. Second operand 3 states. [2018-11-23 13:39:37,952 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:39:37,952 INFO L93 Difference]: Finished difference Result 6847 states and 9754 transitions. [2018-11-23 13:39:37,952 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 13:39:37,952 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 156 [2018-11-23 13:39:37,953 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:39:37,974 INFO L225 Difference]: With dead ends: 6847 [2018-11-23 13:39:37,974 INFO L226 Difference]: Without dead ends: 3405 [2018-11-23 13:39:37,992 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 13:39:37,995 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3405 states. [2018-11-23 13:39:38,157 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3405 to 3367. [2018-11-23 13:39:38,157 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3367 states. [2018-11-23 13:39:38,168 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3367 states to 3367 states and 4687 transitions. [2018-11-23 13:39:38,169 INFO L78 Accepts]: Start accepts. Automaton has 3367 states and 4687 transitions. Word has length 156 [2018-11-23 13:39:38,169 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:39:38,169 INFO L480 AbstractCegarLoop]: Abstraction has 3367 states and 4687 transitions. [2018-11-23 13:39:38,170 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 13:39:38,170 INFO L276 IsEmpty]: Start isEmpty. Operand 3367 states and 4687 transitions. [2018-11-23 13:39:38,178 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 157 [2018-11-23 13:39:38,178 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:39:38,178 INFO L402 BasicCegarLoop]: trace histogram [8, 8, 8, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:39:38,178 INFO L423 AbstractCegarLoop]: === Iteration 5 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:39:38,178 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:39:38,179 INFO L82 PathProgramCache]: Analyzing trace with hash 226006737, now seen corresponding path program 2 times [2018-11-23 13:39:38,179 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 13:39:38,180 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:39:38,181 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:39:38,181 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:39:38,181 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 13:39:38,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:39:38,272 INFO L134 CoverageAnalysis]: Checked inductivity of 123 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2018-11-23 13:39:38,272 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:39:38,272 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 13:39:38,272 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 13:39:38,273 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 13:39:38,273 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 13:39:38,273 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 13:39:38,273 INFO L87 Difference]: Start difference. First operand 3367 states and 4687 transitions. Second operand 3 states. [2018-11-23 13:39:38,517 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:39:38,517 INFO L93 Difference]: Finished difference Result 6745 states and 9492 transitions. [2018-11-23 13:39:38,517 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 13:39:38,517 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 156 [2018-11-23 13:39:38,517 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:39:38,532 INFO L225 Difference]: With dead ends: 6745 [2018-11-23 13:39:38,533 INFO L226 Difference]: Without dead ends: 4071 [2018-11-23 13:39:38,543 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 13:39:38,546 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4071 states. [2018-11-23 13:39:38,651 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4071 to 4014. [2018-11-23 13:39:38,652 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4014 states. [2018-11-23 13:39:38,660 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4014 states to 4014 states and 5579 transitions. [2018-11-23 13:39:38,661 INFO L78 Accepts]: Start accepts. Automaton has 4014 states and 5579 transitions. Word has length 156 [2018-11-23 13:39:38,661 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:39:38,661 INFO L480 AbstractCegarLoop]: Abstraction has 4014 states and 5579 transitions. [2018-11-23 13:39:38,661 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 13:39:38,661 INFO L276 IsEmpty]: Start isEmpty. Operand 4014 states and 5579 transitions. [2018-11-23 13:39:38,667 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 173 [2018-11-23 13:39:38,668 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:39:38,668 INFO L402 BasicCegarLoop]: trace histogram [8, 8, 8, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:39:38,668 INFO L423 AbstractCegarLoop]: === Iteration 6 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:39:38,668 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:39:38,668 INFO L82 PathProgramCache]: Analyzing trace with hash 420724556, now seen corresponding path program 1 times [2018-11-23 13:39:38,669 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 13:39:38,670 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:39:38,670 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-23 13:39:38,671 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:39:38,671 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 13:39:38,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:39:38,768 INFO L134 CoverageAnalysis]: Checked inductivity of 140 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 115 trivial. 0 not checked. [2018-11-23 13:39:38,768 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:39:38,768 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 13:39:38,768 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 13:39:38,769 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 13:39:38,769 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 13:39:38,769 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 13:39:38,769 INFO L87 Difference]: Start difference. First operand 4014 states and 5579 transitions. Second operand 3 states. [2018-11-23 13:39:39,029 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:39:39,029 INFO L93 Difference]: Finished difference Result 7884 states and 11034 transitions. [2018-11-23 13:39:39,029 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 13:39:39,030 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 172 [2018-11-23 13:39:39,030 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:39:39,052 INFO L225 Difference]: With dead ends: 7884 [2018-11-23 13:39:39,052 INFO L226 Difference]: Without dead ends: 5064 [2018-11-23 13:39:39,064 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 13:39:39,070 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5064 states. [2018-11-23 13:39:39,267 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5064 to 5008. [2018-11-23 13:39:39,267 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5008 states. [2018-11-23 13:39:39,282 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5008 states to 5008 states and 6981 transitions. [2018-11-23 13:39:39,283 INFO L78 Accepts]: Start accepts. Automaton has 5008 states and 6981 transitions. Word has length 172 [2018-11-23 13:39:39,284 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:39:39,284 INFO L480 AbstractCegarLoop]: Abstraction has 5008 states and 6981 transitions. [2018-11-23 13:39:39,284 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 13:39:39,284 INFO L276 IsEmpty]: Start isEmpty. Operand 5008 states and 6981 transitions. [2018-11-23 13:39:39,295 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 189 [2018-11-23 13:39:39,295 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:39:39,296 INFO L402 BasicCegarLoop]: trace histogram [8, 8, 8, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:39:39,296 INFO L423 AbstractCegarLoop]: === Iteration 7 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:39:39,296 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:39:39,296 INFO L82 PathProgramCache]: Analyzing trace with hash -517551368, now seen corresponding path program 1 times [2018-11-23 13:39:39,296 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 13:39:39,299 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:39:39,300 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:39:39,300 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:39:39,300 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 13:39:39,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:39:39,422 INFO L134 CoverageAnalysis]: Checked inductivity of 124 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 103 trivial. 0 not checked. [2018-11-23 13:39:39,422 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:39:39,422 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 13:39:39,422 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 13:39:39,423 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 13:39:39,423 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 13:39:39,423 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 13:39:39,423 INFO L87 Difference]: Start difference. First operand 5008 states and 6981 transitions. Second operand 5 states. [2018-11-23 13:39:39,658 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:39:39,658 INFO L93 Difference]: Finished difference Result 10051 states and 14592 transitions. [2018-11-23 13:39:39,659 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 13:39:39,659 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 188 [2018-11-23 13:39:39,659 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:39:39,675 INFO L225 Difference]: With dead ends: 10051 [2018-11-23 13:39:39,675 INFO L226 Difference]: Without dead ends: 5094 [2018-11-23 13:39:39,688 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 13:39:39,692 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5094 states. [2018-11-23 13:39:39,803 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5094 to 5062. [2018-11-23 13:39:39,803 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5062 states. [2018-11-23 13:39:39,813 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5062 states to 5062 states and 7040 transitions. [2018-11-23 13:39:39,814 INFO L78 Accepts]: Start accepts. Automaton has 5062 states and 7040 transitions. Word has length 188 [2018-11-23 13:39:39,814 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:39:39,814 INFO L480 AbstractCegarLoop]: Abstraction has 5062 states and 7040 transitions. [2018-11-23 13:39:39,814 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 13:39:39,815 INFO L276 IsEmpty]: Start isEmpty. Operand 5062 states and 7040 transitions. [2018-11-23 13:39:39,824 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 196 [2018-11-23 13:39:39,824 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:39:39,824 INFO L402 BasicCegarLoop]: trace histogram [8, 8, 7, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:39:39,824 INFO L423 AbstractCegarLoop]: === Iteration 8 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:39:39,824 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:39:39,824 INFO L82 PathProgramCache]: Analyzing trace with hash -880480738, now seen corresponding path program 1 times [2018-11-23 13:39:39,824 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 13:39:39,826 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:39:39,826 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:39:39,827 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:39:39,827 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 13:39:39,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:39:40,056 INFO L134 CoverageAnalysis]: Checked inductivity of 126 backedges. 22 proven. 0 refuted. 0 times theorem prover too weak. 104 trivial. 0 not checked. [2018-11-23 13:39:40,056 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:39:40,057 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2018-11-23 13:39:40,057 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 13:39:40,057 INFO L459 AbstractCegarLoop]: Interpolant automaton has 11 states [2018-11-23 13:39:40,057 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2018-11-23 13:39:40,057 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=91, Unknown=0, NotChecked=0, Total=110 [2018-11-23 13:39:40,058 INFO L87 Difference]: Start difference. First operand 5062 states and 7040 transitions. Second operand 11 states. [2018-11-23 13:39:40,284 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:39:40,284 INFO L93 Difference]: Finished difference Result 10204 states and 14715 transitions. [2018-11-23 13:39:40,285 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-11-23 13:39:40,285 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 195 [2018-11-23 13:39:40,285 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:39:40,308 INFO L225 Difference]: With dead ends: 10204 [2018-11-23 13:39:40,308 INFO L226 Difference]: Without dead ends: 5193 [2018-11-23 13:39:40,323 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=31, Invalid=151, Unknown=0, NotChecked=0, Total=182 [2018-11-23 13:39:40,327 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5193 states. [2018-11-23 13:39:40,436 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5193 to 5129. [2018-11-23 13:39:40,437 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5129 states. [2018-11-23 13:39:40,446 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5129 states to 5129 states and 7102 transitions. [2018-11-23 13:39:40,448 INFO L78 Accepts]: Start accepts. Automaton has 5129 states and 7102 transitions. Word has length 195 [2018-11-23 13:39:40,448 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:39:40,448 INFO L480 AbstractCegarLoop]: Abstraction has 5129 states and 7102 transitions. [2018-11-23 13:39:40,448 INFO L481 AbstractCegarLoop]: Interpolant automaton has 11 states. [2018-11-23 13:39:40,448 INFO L276 IsEmpty]: Start isEmpty. Operand 5129 states and 7102 transitions. [2018-11-23 13:39:40,457 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 219 [2018-11-23 13:39:40,457 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:39:40,457 INFO L402 BasicCegarLoop]: trace histogram [9, 9, 8, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:39:40,457 INFO L423 AbstractCegarLoop]: === Iteration 9 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:39:40,458 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:39:40,458 INFO L82 PathProgramCache]: Analyzing trace with hash 1521610596, now seen corresponding path program 1 times [2018-11-23 13:39:40,458 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 13:39:40,459 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:39:40,459 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:39:40,459 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:39:40,459 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 13:39:40,480 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:39:40,544 INFO L134 CoverageAnalysis]: Checked inductivity of 162 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 155 trivial. 0 not checked. [2018-11-23 13:39:40,544 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:39:40,544 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 13:39:40,544 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 13:39:40,544 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 13:39:40,545 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 13:39:40,545 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 13:39:40,545 INFO L87 Difference]: Start difference. First operand 5129 states and 7102 transitions. Second operand 3 states. [2018-11-23 13:39:40,681 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:39:40,681 INFO L93 Difference]: Finished difference Result 10317 states and 14373 transitions. [2018-11-23 13:39:40,682 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 13:39:40,682 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 218 [2018-11-23 13:39:40,682 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:39:40,702 INFO L225 Difference]: With dead ends: 10317 [2018-11-23 13:39:40,702 INFO L226 Difference]: Without dead ends: 5239 [2018-11-23 13:39:40,714 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 13:39:40,718 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5239 states. [2018-11-23 13:39:40,824 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5239 to 5195. [2018-11-23 13:39:40,825 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5195 states. [2018-11-23 13:39:40,834 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5195 states to 5195 states and 7168 transitions. [2018-11-23 13:39:40,835 INFO L78 Accepts]: Start accepts. Automaton has 5195 states and 7168 transitions. Word has length 218 [2018-11-23 13:39:40,836 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:39:40,836 INFO L480 AbstractCegarLoop]: Abstraction has 5195 states and 7168 transitions. [2018-11-23 13:39:40,836 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 13:39:40,836 INFO L276 IsEmpty]: Start isEmpty. Operand 5195 states and 7168 transitions. [2018-11-23 13:39:40,845 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 219 [2018-11-23 13:39:40,845 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:39:40,845 INFO L402 BasicCegarLoop]: trace histogram [9, 9, 8, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:39:40,845 INFO L423 AbstractCegarLoop]: === Iteration 10 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:39:40,845 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:39:40,846 INFO L82 PathProgramCache]: Analyzing trace with hash -1448387094, now seen corresponding path program 1 times [2018-11-23 13:39:40,846 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 13:39:40,847 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:39:40,847 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:39:40,848 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:39:40,848 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 13:39:40,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:39:41,089 INFO L134 CoverageAnalysis]: Checked inductivity of 162 backedges. 21 proven. 6 refuted. 0 times theorem prover too weak. 135 trivial. 0 not checked. [2018-11-23 13:39:41,089 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-23 13:39:41,089 INFO L192 anRefinementStrategy]: Switched to InterpolantGenerator mode ABSTRACT_INTERPRETATION [2018-11-23 13:39:41,089 INFO L200 CegarAbsIntRunner]: Running AI on error trace of length 219 with the following transitions: [2018-11-23 13:39:41,090 INFO L202 CegarAbsIntRunner]: [0], [2], [3], [254], [256], [258], [260], [262], [264], [266], [268], [271], [274], [280], [283], [286], [289], [292], [294], [298], [301], [304], [306], [309], [318], [666], [668], [669], [670], [671], [712], [721], [726], [738], [742], [750], [761], [762], [763], [768], [771], [774], [800], [801], [803], [805], [806], [807], [809], [810], [811], [812], [829], [830], [973], [975], [978], [979], [981], [982], [1144], [1145], [1146], [1149], [1154], [1159], [1160], [1169], [1171], [1172], [1173], [1175], [1178], [1180], [1182], [1183], [1238], [1239], [1240], [1242], [1243], [1244], [1246], [1248], [1253], [1255], [1260], [1262], [1267], [1269], [1284], [1287], [1292], [1301], [1303], [1312], [1314], [1315], [1336], [1337], [1340], [1342], [1347], [1359], [1362], [1363], [1365], [1366], [1367], [1368], [1372], [1373], [1376], [1377], [1426], [1427], [1428], [1429], [1430], [1431], [1432], [1433], [1434], [1435], [1436], [1437], [1438], [1439], [1440], [1441], [1442], [1443], [1444], [1445], [1492], [1494], [1495], [1502], [1503], [1506], [1507], [1520], [1521], [1522], [1523], [1524], [1525], [1548], [1549], [1550], [1551], [1594], [1595], [1598], [1599], [1600], [1601], [1602], [1603], [1604], [1605], [1620], [1621], [1622], [1623], [1624], [1625], [1634], [1635], [1636], [1637], [1638], [1639], [1640], [1641], [1642], [1643], [1644], [1646], [1647], [1648], [1649], [1650] [2018-11-23 13:39:41,095 INFO L148 AbstractInterpreter]: Using domain PoormanAbstractDomain with backing domain CompoundDomain [CongruenceDomain, ExplicitValueDomain] [2018-11-23 13:39:41,095 INFO L101 FixpointEngine]: Starting fixpoint engine with domain PoormanAbstractDomain (maxUnwinding=3, maxParallelStates=2) [2018-11-23 13:39:41,130 FATAL L292 ToolchainWalker]: The Plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction has thrown an exception: java.lang.AssertionError: java.lang.IllegalArgumentException: unknown symbol (const Int (Array Int Int)) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.BaseRefinementStrategy.extractInterpolants(BaseRefinementStrategy.java:391) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.BaseRefinementStrategy.handleInfeasibleCase(BaseRefinementStrategy.java:296) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.BaseRefinementStrategy.executeStrategy(BaseRefinementStrategy.java:206) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.TraceAbstractionRefinementEngine.(TraceAbstractionRefinementEngine.java:70) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.BasicCegarLoop.isCounterexampleFeasible(BasicCegarLoop.java:456) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.AbstractCegarLoop.iterateInternal(AbstractCegarLoop.java:434) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.AbstractCegarLoop.iterate(AbstractCegarLoop.java:376) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.iterate(TraceAbstractionStarter.java:334) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.runCegarLoops(TraceAbstractionStarter.java:174) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.(TraceAbstractionStarter.java:126) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver.finish(TraceAbstractionObserver.java:123) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runObserver(PluginConnector.java:168) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runTool(PluginConnector.java:151) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.run(PluginConnector.java:128) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.executePluginConnector(ToolchainWalker.java:232) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.processPlugin(ToolchainWalker.java:226) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walkUnprotected(ToolchainWalker.java:142) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walk(ToolchainWalker.java:104) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainManager$Toolchain.processToolchain(ToolchainManager.java:316) at de.uni_freiburg.informatik.ultimate.core.coreplugin.toolchain.DefaultToolchainJob.run(DefaultToolchainJob.java:145) at org.eclipse.core.internal.jobs.Worker.run(Worker.java:55) Caused by: java.lang.IllegalArgumentException: unknown symbol (const Int (Array Int Int)) at de.uni_freiburg.informatik.ultimate.modelcheckerutils.boogie.MappedTerm2Expression.translate(MappedTerm2Expression.java:209) at de.uni_freiburg.informatik.ultimate.modelcheckerutils.boogie.MappedTerm2Expression.translate(MappedTerm2Expression.java:129) at de.uni_freiburg.informatik.ultimate.modelcheckerutils.boogie.MappedTerm2Expression.translateStore(MappedTerm2Expression.java:291) at de.uni_freiburg.informatik.ultimate.modelcheckerutils.boogie.MappedTerm2Expression.translate(MappedTerm2Expression.java:157) at de.uni_freiburg.informatik.ultimate.modelcheckerutils.boogie.MappedTerm2Expression.translate(MappedTerm2Expression.java:129) at de.uni_freiburg.informatik.ultimate.modelcheckerutils.boogie.MappedTerm2Expression.translate(MappedTerm2Expression.java:165) at de.uni_freiburg.informatik.ultimate.modelcheckerutils.boogie.MappedTerm2Expression.translate(MappedTerm2Expression.java:129) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.domain.transformula.poorman.util.AssumptionBuilder.constructBoogieAssumeStatement(AssumptionBuilder.java:75) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.domain.transformula.poorman.util.TermConjunctEvaluator.getCachedCodeBlock(TermConjunctEvaluator.java:273) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.domain.transformula.poorman.util.TermConjunctEvaluator.applyPost(TermConjunctEvaluator.java:296) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.domain.transformula.poorman.util.TermConjunctEvaluator.lambda$4(TermConjunctEvaluator.java:178) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.domain.transformula.poorman.util.TermConjunctEvaluator.computePost(TermConjunctEvaluator.java:93) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.domain.transformula.poorman.PoormanCachedPostOperation.applyPost(PoormanCachedPostOperation.java:308) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.domain.transformula.poorman.PoormansAbstractPostOperator.applyPost(PoormansAbstractPostOperator.java:217) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.domain.transformula.poorman.PoormansAbstractPostOperator.apply(PoormansAbstractPostOperator.java:119) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.domain.transformula.poorman.PoormansAbstractPostOperator.apply(PoormansAbstractPostOperator.java:1) at de.uni_freiburg.informatik.ultimate.modelcheckerutils.absint.DisjunctiveAbstractState.lambda$17(DisjunctiveAbstractState.java:340) at de.uni_freiburg.informatik.ultimate.modelcheckerutils.absint.DisjunctiveAbstractState.mapCollection(DisjunctiveAbstractState.java:536) at de.uni_freiburg.informatik.ultimate.modelcheckerutils.absint.DisjunctiveAbstractState.apply(DisjunctiveAbstractState.java:340) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.algorithm.FixpointEngine.calculateAbstractPost(FixpointEngine.java:249) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.algorithm.FixpointEngine.calculateFixpoint(FixpointEngine.java:134) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.algorithm.FixpointEngine.run(FixpointEngine.java:105) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.tool.AbstractInterpreter.runWithoutTimeoutAndResults(AbstractInterpreter.java:149) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.CegarAbsIntRunner.generateFixpoints(CegarAbsIntRunner.java:217) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.BaseTaipanRefinementStrategy.constructInterpolantGenerator(BaseTaipanRefinementStrategy.java:379) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.BaseTaipanRefinementStrategy.getInterpolantGenerator(BaseTaipanRefinementStrategy.java:224) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.BaseRefinementStrategy.extractInterpolants(BaseRefinementStrategy.java:380) ... 20 more [2018-11-23 13:39:41,133 INFO L168 Benchmark]: Toolchain (without parser) took 80593.91 ms. Allocated memory was 1.0 GB in the beginning and 3.4 GB in the end (delta: 2.4 GB). Free memory was 951.2 MB in the beginning and 2.1 GB in the end (delta: -1.2 GB). Peak memory consumption was 1.2 GB. Max. memory is 11.5 GB. [2018-11-23 13:39:41,134 INFO L168 Benchmark]: CDTParser took 0.18 ms. Allocated memory is still 1.0 GB. Free memory is still 985.5 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 13:39:41,134 INFO L168 Benchmark]: CACSL2BoogieTranslator took 1227.80 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 137.4 MB). Free memory was 951.2 MB in the beginning and 1.0 GB in the end (delta: -95.3 MB). Peak memory consumption was 99.8 MB. Max. memory is 11.5 GB. [2018-11-23 13:39:41,135 INFO L168 Benchmark]: Boogie Procedure Inliner took 42.87 ms. Allocated memory is still 1.2 GB. Free memory was 1.0 GB in the beginning and 1.0 GB in the end (delta: 2.8 MB). Peak memory consumption was 2.8 MB. Max. memory is 11.5 GB. [2018-11-23 13:39:41,135 INFO L168 Benchmark]: Boogie Preprocessor took 84.30 ms. Allocated memory is still 1.2 GB. Free memory was 1.0 GB in the beginning and 1.0 GB in the end (delta: 10.7 MB). Peak memory consumption was 10.7 MB. Max. memory is 11.5 GB. [2018-11-23 13:39:41,136 INFO L168 Benchmark]: RCFGBuilder took 1327.35 ms. Allocated memory is still 1.2 GB. Free memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: -24.1 MB). Peak memory consumption was 189.9 MB. Max. memory is 11.5 GB. [2018-11-23 13:39:41,136 INFO L168 Benchmark]: TraceAbstraction took 77908.79 ms. Allocated memory was 1.2 GB in the beginning and 3.4 GB in the end (delta: 2.3 GB). Free memory was 1.1 GB in the beginning and 2.1 GB in the end (delta: -1.1 GB). Peak memory consumption was 1.2 GB. Max. memory is 11.5 GB. [2018-11-23 13:39:41,139 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18 ms. Allocated memory is still 1.0 GB. Free memory is still 985.5 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 1227.80 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 137.4 MB). Free memory was 951.2 MB in the beginning and 1.0 GB in the end (delta: -95.3 MB). Peak memory consumption was 99.8 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 42.87 ms. Allocated memory is still 1.2 GB. Free memory was 1.0 GB in the beginning and 1.0 GB in the end (delta: 2.8 MB). Peak memory consumption was 2.8 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 84.30 ms. Allocated memory is still 1.2 GB. Free memory was 1.0 GB in the beginning and 1.0 GB in the end (delta: 10.7 MB). Peak memory consumption was 10.7 MB. Max. memory is 11.5 GB. * RCFGBuilder took 1327.35 ms. Allocated memory is still 1.2 GB. Free memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: -24.1 MB). Peak memory consumption was 189.9 MB. Max. memory is 11.5 GB. * TraceAbstraction took 77908.79 ms. Allocated memory was 1.2 GB in the beginning and 3.4 GB in the end (delta: 2.3 GB). Free memory was 1.1 GB in the beginning and 2.1 GB in the end (delta: -1.1 GB). Peak memory consumption was 1.2 GB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - ExceptionOrErrorResult: AssertionError: java.lang.IllegalArgumentException: unknown symbol (const Int (Array Int Int)) de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: AssertionError: java.lang.IllegalArgumentException: unknown symbol (const Int (Array Int Int)): de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.BaseRefinementStrategy.extractInterpolants(BaseRefinementStrategy.java:391) RESULT: Ultimate could not prove your program: Toolchain returned no result. Received shutdown request... ### Bit-precise run ### This is Ultimate 0.1.23-aa41828 [2018-11-23 13:39:42,600 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 13:39:42,601 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 13:39:42,610 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 13:39:42,610 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 13:39:42,611 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 13:39:42,611 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 13:39:42,613 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 13:39:42,614 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 13:39:42,614 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 13:39:42,615 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 13:39:42,615 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 13:39:42,616 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 13:39:42,616 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 13:39:42,618 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 13:39:42,618 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 13:39:42,619 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 13:39:42,620 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 13:39:42,622 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 13:39:42,623 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 13:39:42,623 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 13:39:42,624 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 13:39:42,626 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 13:39:42,627 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 13:39:42,627 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 13:39:42,627 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 13:39:42,628 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 13:39:42,628 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 13:39:42,629 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 13:39:42,630 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 13:39:42,630 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 13:39:42,630 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 13:39:42,631 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 13:39:42,631 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 13:39:42,631 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 13:39:42,632 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 13:39:42,632 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan/config/svcomp-Reach-64bit-Taipan_Bitvector.epf [2018-11-23 13:39:42,642 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 13:39:42,642 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 13:39:42,643 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 13:39:42,643 INFO L133 SettingsManager]: * ... calls to implemented procedures=ONLY_FOR_CONCURRENT_PROGRAMS [2018-11-23 13:39:42,643 INFO L133 SettingsManager]: * User list type=DISABLED [2018-11-23 13:39:42,643 INFO L131 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2018-11-23 13:39:42,643 INFO L133 SettingsManager]: * Explicit value domain=true [2018-11-23 13:39:42,644 INFO L133 SettingsManager]: * Octagon Domain=false [2018-11-23 13:39:42,644 INFO L133 SettingsManager]: * Abstract domain=CompoundDomain [2018-11-23 13:39:42,644 INFO L133 SettingsManager]: * Interval Domain=false [2018-11-23 13:39:42,644 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 13:39:42,644 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 13:39:42,644 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 13:39:42,645 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 13:39:42,645 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 13:39:42,646 INFO L133 SettingsManager]: * Use bitvectors instead of ints=true [2018-11-23 13:39:42,646 INFO L133 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2018-11-23 13:39:42,646 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 13:39:42,646 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 13:39:42,646 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 13:39:42,646 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 13:39:42,646 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-23 13:39:42,646 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 13:39:42,647 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-23 13:39:42,647 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 13:39:42,647 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 13:39:42,647 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 13:39:42,647 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 13:39:42,647 INFO L133 SettingsManager]: * Trace refinement strategy=WALRUS [2018-11-23 13:39:42,647 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 13:39:42,647 INFO L133 SettingsManager]: * Command for external solver=cvc4nyu --tear-down-incremental --rewrite-divk --print-success --lang smt [2018-11-23 13:39:42,647 INFO L133 SettingsManager]: * Logic for external solver=AUFBV [2018-11-23 13:39:42,647 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 6186ef142a0a91a64444136f0ec69676cad8008d [2018-11-23 13:39:42,675 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 13:39:42,683 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 13:39:42,685 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 13:39:42,686 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 13:39:42,686 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 13:39:42,687 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_ppp.ko-entry_point_false-unreach-call.cil.out.c [2018-11-23 13:39:42,721 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan/data/935a06bb8/5288a7359eb54f2481c3c54db7c521ca/FLAG93716fa81 [2018-11-23 13:39:43,174 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 13:39:43,174 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_ppp.ko-entry_point_false-unreach-call.cil.out.c [2018-11-23 13:39:43,198 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan/data/935a06bb8/5288a7359eb54f2481c3c54db7c521ca/FLAG93716fa81 [2018-11-23 13:39:43,703 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan/data/935a06bb8/5288a7359eb54f2481c3c54db7c521ca [2018-11-23 13:39:43,706 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 13:39:43,707 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 13:39:43,707 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 13:39:43,707 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 13:39:43,709 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 13:39:43,710 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 01:39:43" (1/1) ... [2018-11-23 13:39:43,712 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@514d3bea and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:39:43, skipping insertion in model container [2018-11-23 13:39:43,712 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 01:39:43" (1/1) ... [2018-11-23 13:39:43,718 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 13:39:43,778 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 13:39:44,702 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 13:39:44,724 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 13:39:44,872 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 13:39:44,938 INFO L195 MainTranslator]: Completed translation [2018-11-23 13:39:44,938 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:39:44 WrapperNode [2018-11-23 13:39:44,938 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 13:39:44,939 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 13:39:44,939 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 13:39:44,939 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 13:39:44,945 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:39:44" (1/1) ... [2018-11-23 13:39:44,979 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:39:44" (1/1) ... [2018-11-23 13:39:44,992 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 13:39:44,992 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 13:39:44,992 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 13:39:44,992 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 13:39:44,999 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:39:44" (1/1) ... [2018-11-23 13:39:44,999 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:39:44" (1/1) ... [2018-11-23 13:39:45,009 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:39:44" (1/1) ... [2018-11-23 13:39:45,010 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:39:44" (1/1) ... [2018-11-23 13:39:45,066 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:39:44" (1/1) ... [2018-11-23 13:39:45,076 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:39:44" (1/1) ... [2018-11-23 13:39:45,087 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:39:44" (1/1) ... [2018-11-23 13:39:45,100 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 13:39:45,100 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 13:39:45,100 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 13:39:45,100 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 13:39:45,101 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:39:44" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 13:39:45,149 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_13 [2018-11-23 13:39:45,149 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_13 [2018-11-23 13:39:45,150 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_hard_header [2018-11-23 13:39:45,150 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_hard_header [2018-11-23 13:39:45,150 INFO L130 BoogieDeclarations]: Found specification of procedure __raw_spin_lock_init [2018-11-23 13:39:45,150 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_start [2018-11-23 13:39:45,150 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_start [2018-11-23 13:39:45,150 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_rx [2018-11-23 13:39:45,150 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_rx [2018-11-23 13:39:45,150 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2018-11-23 13:39:45,150 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_type_trans [2018-11-23 13:39:45,151 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_type_trans [2018-11-23 13:39:45,151 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_init [2018-11-23 13:39:45,151 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_init [2018-11-23 13:39:45,151 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2018-11-23 13:39:45,151 INFO L130 BoogieDeclarations]: Found specification of procedure skb_reserve [2018-11-23 13:39:45,151 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_reserve [2018-11-23 13:39:45,151 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 13:39:45,151 INFO L130 BoogieDeclarations]: Found specification of procedure activate_pending_timer_1 [2018-11-23 13:39:45,151 INFO L138 BoogieDeclarations]: Found implementation of procedure activate_pending_timer_1 [2018-11-23 13:39:45,151 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2018-11-23 13:39:45,152 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_setup_3 [2018-11-23 13:39:45,152 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2018-11-23 13:39:45,152 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2018-11-23 13:39:45,152 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2018-11-23 13:39:45,152 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize [2018-11-23 13:39:45,152 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_initialize [2018-11-23 13:39:45,152 INFO L130 BoogieDeclarations]: Found specification of procedure dev_queue_xmit [2018-11-23 13:39:45,152 INFO L130 BoogieDeclarations]: Found specification of procedure netif_dormant_off [2018-11-23 13:39:45,152 INFO L138 BoogieDeclarations]: Found implementation of procedure netif_dormant_off [2018-11-23 13:39:45,152 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2018-11-23 13:39:45,153 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2018-11-23 13:39:45,153 INFO L130 BoogieDeclarations]: Found specification of procedure skb_queue_head_init [2018-11-23 13:39:45,153 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_queue_head_init [2018-11-23 13:39:45,153 INFO L130 BoogieDeclarations]: Found specification of procedure dev_to_hdlc [2018-11-23 13:39:45,153 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_to_hdlc [2018-11-23 13:39:45,153 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2018-11-23 13:39:45,153 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2018-11-23 13:39:45,153 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2018-11-23 13:39:45,153 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_disconnect_3 [2018-11-23 13:39:45,153 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2018-11-23 13:39:45,153 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2018-11-23 13:39:45,154 INFO L130 BoogieDeclarations]: Found specification of procedure netif_dormant_on [2018-11-23 13:39:45,154 INFO L138 BoogieDeclarations]: Found implementation of procedure netif_dormant_on [2018-11-23 13:39:45,154 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2018-11-23 13:39:45,154 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2018-11-23 13:39:45,154 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2018-11-23 13:39:45,154 INFO L130 BoogieDeclarations]: Found specification of procedure __skb_queue_head_init [2018-11-23 13:39:45,154 INFO L138 BoogieDeclarations]: Found implementation of procedure __skb_queue_head_init [2018-11-23 13:39:45,154 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2018-11-23 13:39:45,154 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2018-11-23 13:39:45,154 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_release_3 [2018-11-23 13:39:45,155 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_tx_flush [2018-11-23 13:39:45,155 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_tx_flush [2018-11-23 13:39:45,155 INFO L130 BoogieDeclarations]: Found specification of procedure skb_pull [2018-11-23 13:39:45,155 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2018-11-23 13:39:45,155 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2018-11-23 13:39:45,155 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2018-11-23 13:39:45,155 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2018-11-23 13:39:45,155 INFO L130 BoogieDeclarations]: Found specification of procedure skb_reset_network_header [2018-11-23 13:39:45,155 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_reset_network_header [2018-11-23 13:39:45,155 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_dequeue_12 [2018-11-23 13:39:45,156 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_dequeue_12 [2018-11-23 13:39:45,156 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2018-11-23 13:39:45,156 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2018-11-23 13:39:45,156 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_timer [2018-11-23 13:39:45,156 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_timer [2018-11-23 13:39:45,156 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_open_3 [2018-11-23 13:39:45,156 INFO L130 BoogieDeclarations]: Found specification of procedure del_timer [2018-11-23 13:39:45,156 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~C_USHORT~X~C_USHORT~TO~C_INT [2018-11-23 13:39:45,156 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~C_USHORT~X~C_USHORT~TO~C_INT [2018-11-23 13:39:45,156 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-23 13:39:45,156 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-23 13:39:45,157 INFO L130 BoogieDeclarations]: Found specification of procedure disable_suitable_timer_1 [2018-11-23 13:39:45,157 INFO L138 BoogieDeclarations]: Found implementation of procedure disable_suitable_timer_1 [2018-11-23 13:39:45,157 INFO L130 BoogieDeclarations]: Found specification of procedure test_and_set_bit [2018-11-23 13:39:45,157 INFO L138 BoogieDeclarations]: Found implementation of procedure test_and_set_bit [2018-11-23 13:39:45,157 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2018-11-23 13:39:45,157 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2018-11-23 13:39:45,157 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2018-11-23 13:39:45,157 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2018-11-23 13:39:45,157 INFO L130 BoogieDeclarations]: Found specification of procedure __kmalloc [2018-11-23 13:39:45,157 INFO L138 BoogieDeclarations]: Found implementation of procedure __kmalloc [2018-11-23 13:39:45,158 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-23 13:39:45,158 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-23 13:39:45,158 INFO L130 BoogieDeclarations]: Found specification of procedure get_ppp [2018-11-23 13:39:45,158 INFO L138 BoogieDeclarations]: Found implementation of procedure get_ppp [2018-11-23 13:39:45,158 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-23 13:39:45,158 INFO L130 BoogieDeclarations]: Found specification of procedure get_proto [2018-11-23 13:39:45,158 INFO L138 BoogieDeclarations]: Found implementation of procedure get_proto [2018-11-23 13:39:45,158 INFO L130 BoogieDeclarations]: Found specification of procedure memcmp [2018-11-23 13:39:45,158 INFO L130 BoogieDeclarations]: Found specification of procedure reg_timer_1 [2018-11-23 13:39:45,158 INFO L138 BoogieDeclarations]: Found implementation of procedure reg_timer_1 [2018-11-23 13:39:45,159 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_add [2018-11-23 13:39:45,159 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_add [2018-11-23 13:39:45,159 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_close [2018-11-23 13:39:45,159 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_close [2018-11-23 13:39:45,159 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_unlock_irqrestore [2018-11-23 13:39:45,159 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_tx_cp [2018-11-23 13:39:45,159 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_tx_cp [2018-11-23 13:39:45,159 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-23 13:39:45,159 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_is_empty [2018-11-23 13:39:45,159 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_is_empty [2018-11-23 13:39:45,160 INFO L130 BoogieDeclarations]: Found specification of procedure attach_hdlc_protocol [2018-11-23 13:39:45,160 INFO L130 BoogieDeclarations]: Found specification of procedure add_timer [2018-11-23 13:39:45,160 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_mod_timer_15 [2018-11-23 13:39:45,160 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_mod_timer_15 [2018-11-23 13:39:45,160 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_mod_timer_14 [2018-11-23 13:39:45,160 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_mod_timer_14 [2018-11-23 13:39:45,160 INFO L130 BoogieDeclarations]: Found specification of procedure mod_timer [2018-11-23 13:39:45,160 INFO L130 BoogieDeclarations]: Found specification of procedure register_hdlc_protocol [2018-11-23 13:39:45,160 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2018-11-23 13:39:45,161 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2018-11-23 13:39:45,161 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_cp_parse_cr [2018-11-23 13:39:45,161 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_cp_parse_cr [2018-11-23 13:39:45,161 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2018-11-23 13:39:45,161 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_stop [2018-11-23 13:39:45,161 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_stop [2018-11-23 13:39:45,161 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2018-11-23 13:39:45,161 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2018-11-23 13:39:45,161 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2018-11-23 13:39:45,162 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2018-11-23 13:39:45,162 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-23 13:39:45,162 INFO L130 BoogieDeclarations]: Found specification of procedure skb_queue_tail [2018-11-23 13:39:45,162 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_cp_event [2018-11-23 13:39:45,162 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_cp_event [2018-11-23 13:39:45,162 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2018-11-23 13:39:45,162 INFO L130 BoogieDeclarations]: Found specification of procedure capable [2018-11-23 13:39:45,162 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2018-11-23 13:39:45,162 INFO L130 BoogieDeclarations]: Found specification of procedure unregister_hdlc_protocol [2018-11-23 13:39:45,163 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2018-11-23 13:39:45,163 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2018-11-23 13:39:45,163 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2018-11-23 13:39:45,163 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2018-11-23 13:39:45,163 INFO L130 BoogieDeclarations]: Found specification of procedure __fswab16 [2018-11-23 13:39:45,163 INFO L138 BoogieDeclarations]: Found implementation of procedure __fswab16 [2018-11-23 13:39:45,163 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2018-11-23 13:39:45,163 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize_hdlc_proto_3 [2018-11-23 13:39:45,163 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_initialize_hdlc_proto_3 [2018-11-23 13:39:45,164 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_ioctl [2018-11-23 13:39:45,164 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_ioctl [2018-11-23 13:39:45,164 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_del_timer_16 [2018-11-23 13:39:45,164 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_del_timer_16 [2018-11-23 13:39:45,164 INFO L130 BoogieDeclarations]: Found specification of procedure netdev_priv [2018-11-23 13:39:45,164 INFO L138 BoogieDeclarations]: Found implementation of procedure netdev_priv [2018-11-23 13:39:45,164 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~C_ULONG~TO~VOID [2018-11-23 13:39:45,164 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~C_ULONG~TO~VOID [2018-11-23 13:39:45,165 INFO L130 BoogieDeclarations]: Found specification of procedure choose_timer_1 [2018-11-23 13:39:45,165 INFO L138 BoogieDeclarations]: Found implementation of procedure choose_timer_1 [2018-11-23 13:39:45,165 INFO L130 BoogieDeclarations]: Found specification of procedure mod_init [2018-11-23 13:39:45,165 INFO L138 BoogieDeclarations]: Found implementation of procedure mod_init [2018-11-23 13:39:45,165 INFO L130 BoogieDeclarations]: Found specification of procedure proto_name [2018-11-23 13:39:45,165 INFO L138 BoogieDeclarations]: Found implementation of procedure proto_name [2018-11-23 13:39:45,165 INFO L130 BoogieDeclarations]: Found specification of procedure linkwatch_fire_event [2018-11-23 13:39:45,165 INFO L130 BoogieDeclarations]: Found specification of procedure __dev_kfree_skb_any [2018-11-23 13:39:45,166 INFO L130 BoogieDeclarations]: Found specification of procedure test_and_clear_bit [2018-11-23 13:39:45,166 INFO L138 BoogieDeclarations]: Found implementation of procedure test_and_clear_bit [2018-11-23 13:39:45,166 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_final_state [2018-11-23 13:39:45,166 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_final_state [2018-11-23 13:39:45,166 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2018-11-23 13:39:45,166 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2018-11-23 13:39:45,166 INFO L130 BoogieDeclarations]: Found specification of procedure mod_exit [2018-11-23 13:39:45,166 INFO L138 BoogieDeclarations]: Found implementation of procedure mod_exit [2018-11-23 13:39:45,166 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 13:39:45,167 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 13:39:51,387 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 13:39:51,387 INFO L280 CfgBuilder]: Removed 1 assue(true) statements. [2018-11-23 13:39:51,387 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 01:39:51 BoogieIcfgContainer [2018-11-23 13:39:51,387 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 13:39:51,388 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-23 13:39:51,388 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-23 13:39:51,390 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-23 13:39:51,390 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 01:39:43" (1/3) ... [2018-11-23 13:39:51,391 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3520d8f5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 01:39:51, skipping insertion in model container [2018-11-23 13:39:51,391 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:39:44" (2/3) ... [2018-11-23 13:39:51,391 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3520d8f5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 01:39:51, skipping insertion in model container [2018-11-23 13:39:51,392 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 01:39:51" (3/3) ... [2018-11-23 13:39:51,393 INFO L112 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_ppp.ko-entry_point_false-unreach-call.cil.out.c [2018-11-23 13:39:51,399 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-23 13:39:51,406 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-23 13:39:51,418 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-23 13:39:51,447 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-23 13:39:51,447 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-23 13:39:51,448 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-23 13:39:51,448 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-23 13:39:51,448 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-23 13:39:51,448 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-23 13:39:51,448 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-23 13:39:51,448 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-23 13:39:51,449 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-23 13:39:51,475 INFO L276 IsEmpty]: Start isEmpty. Operand 634 states. [2018-11-23 13:39:51,484 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2018-11-23 13:39:51,484 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:39:51,485 INFO L402 BasicCegarLoop]: trace histogram [5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:39:51,487 INFO L423 AbstractCegarLoop]: === Iteration 1 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:39:51,490 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:39:51,491 INFO L82 PathProgramCache]: Analyzing trace with hash -277550130, now seen corresponding path program 1 times [2018-11-23 13:39:51,495 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 13:39:51,495 INFO L69 tionRefinementEngine]: Using refinement strategy WalrusRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan/cvc4nyu Starting monitored process 2 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 13:39:51,516 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:39:51,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:39:51,733 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 13:39:51,772 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2018-11-23 13:39:51,773 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 13:39:51,779 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:39:51,780 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 13:39:51,784 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 13:39:51,795 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 13:39:51,796 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 13:39:51,798 INFO L87 Difference]: Start difference. First operand 634 states. Second operand 3 states. [2018-11-23 13:39:52,034 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:39:52,035 INFO L93 Difference]: Finished difference Result 1802 states and 2638 transitions. [2018-11-23 13:39:52,035 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 13:39:52,037 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 65 [2018-11-23 13:39:52,037 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:39:52,057 INFO L225 Difference]: With dead ends: 1802 [2018-11-23 13:39:52,057 INFO L226 Difference]: Without dead ends: 1163 [2018-11-23 13:39:52,068 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 64 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 13:39:52,082 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1163 states. [2018-11-23 13:39:52,170 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1163 to 1163. [2018-11-23 13:39:52,171 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1163 states. [2018-11-23 13:39:52,178 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1163 states to 1163 states and 1618 transitions. [2018-11-23 13:39:52,180 INFO L78 Accepts]: Start accepts. Automaton has 1163 states and 1618 transitions. Word has length 65 [2018-11-23 13:39:52,181 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:39:52,181 INFO L480 AbstractCegarLoop]: Abstraction has 1163 states and 1618 transitions. [2018-11-23 13:39:52,181 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 13:39:52,181 INFO L276 IsEmpty]: Start isEmpty. Operand 1163 states and 1618 transitions. [2018-11-23 13:39:52,186 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2018-11-23 13:39:52,186 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:39:52,186 INFO L402 BasicCegarLoop]: trace histogram [5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:39:52,187 INFO L423 AbstractCegarLoop]: === Iteration 2 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:39:52,187 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:39:52,187 INFO L82 PathProgramCache]: Analyzing trace with hash 107707795, now seen corresponding path program 1 times [2018-11-23 13:39:52,188 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 13:39:52,188 INFO L69 tionRefinementEngine]: Using refinement strategy WalrusRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan/cvc4nyu Starting monitored process 3 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 13:39:52,211 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:39:52,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:39:52,361 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 13:39:52,400 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2018-11-23 13:39:52,400 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 13:39:52,405 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:39:52,405 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 13:39:52,407 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 13:39:52,407 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 13:39:52,407 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 13:39:52,407 INFO L87 Difference]: Start difference. First operand 1163 states and 1618 transitions. Second operand 5 states. [2018-11-23 13:39:52,587 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:39:52,587 INFO L93 Difference]: Finished difference Result 2301 states and 3205 transitions. [2018-11-23 13:39:52,589 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 13:39:52,590 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 82 [2018-11-23 13:39:52,590 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:39:52,599 INFO L225 Difference]: With dead ends: 2301 [2018-11-23 13:39:52,599 INFO L226 Difference]: Without dead ends: 1162 [2018-11-23 13:39:52,606 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 83 GetRequests, 78 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2018-11-23 13:39:52,608 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1162 states. [2018-11-23 13:39:52,657 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1162 to 1162. [2018-11-23 13:39:52,658 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1162 states. [2018-11-23 13:39:52,666 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1162 states to 1162 states and 1614 transitions. [2018-11-23 13:39:52,667 INFO L78 Accepts]: Start accepts. Automaton has 1162 states and 1614 transitions. Word has length 82 [2018-11-23 13:39:52,668 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:39:52,668 INFO L480 AbstractCegarLoop]: Abstraction has 1162 states and 1614 transitions. [2018-11-23 13:39:52,668 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 13:39:52,668 INFO L276 IsEmpty]: Start isEmpty. Operand 1162 states and 1614 transitions. [2018-11-23 13:39:52,673 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2018-11-23 13:39:52,673 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:39:52,673 INFO L402 BasicCegarLoop]: trace histogram [7, 7, 7, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:39:52,673 INFO L423 AbstractCegarLoop]: === Iteration 3 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:39:52,674 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:39:52,674 INFO L82 PathProgramCache]: Analyzing trace with hash 324186377, now seen corresponding path program 1 times [2018-11-23 13:39:52,675 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 13:39:52,675 INFO L69 tionRefinementEngine]: Using refinement strategy WalrusRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan/cvc4nyu Starting monitored process 4 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 13:39:52,708 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:39:52,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:39:52,935 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 13:39:53,029 INFO L134 CoverageAnalysis]: Checked inductivity of 89 backedges. 40 proven. 0 refuted. 0 times theorem prover too weak. 49 trivial. 0 not checked. [2018-11-23 13:39:53,029 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 13:39:53,031 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:39:53,031 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 13:39:53,032 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-23 13:39:53,032 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-23 13:39:53,032 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2018-11-23 13:39:53,032 INFO L87 Difference]: Start difference. First operand 1162 states and 1614 transitions. Second operand 6 states. [2018-11-23 13:39:54,339 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:39:54,339 INFO L93 Difference]: Finished difference Result 3435 states and 4974 transitions. [2018-11-23 13:39:54,340 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-23 13:39:54,341 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 109 [2018-11-23 13:39:54,341 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:39:54,361 INFO L225 Difference]: With dead ends: 3435 [2018-11-23 13:39:54,361 INFO L226 Difference]: Without dead ends: 2284 [2018-11-23 13:39:54,372 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 110 GetRequests, 104 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=18, Invalid=38, Unknown=0, NotChecked=0, Total=56 [2018-11-23 13:39:54,376 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2284 states. [2018-11-23 13:39:54,506 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2284 to 2284. [2018-11-23 13:39:54,506 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2284 states. [2018-11-23 13:39:54,515 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2284 states to 2284 states and 3277 transitions. [2018-11-23 13:39:54,515 INFO L78 Accepts]: Start accepts. Automaton has 2284 states and 3277 transitions. Word has length 109 [2018-11-23 13:39:54,516 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:39:54,516 INFO L480 AbstractCegarLoop]: Abstraction has 2284 states and 3277 transitions. [2018-11-23 13:39:54,516 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-23 13:39:54,516 INFO L276 IsEmpty]: Start isEmpty. Operand 2284 states and 3277 transitions. [2018-11-23 13:39:54,523 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 157 [2018-11-23 13:39:54,524 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:39:54,524 INFO L402 BasicCegarLoop]: trace histogram [8, 8, 8, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:39:54,524 INFO L423 AbstractCegarLoop]: === Iteration 4 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:39:54,524 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:39:54,524 INFO L82 PathProgramCache]: Analyzing trace with hash -393708427, now seen corresponding path program 1 times [2018-11-23 13:39:54,526 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 13:39:54,526 INFO L69 tionRefinementEngine]: Using refinement strategy WalrusRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan/cvc4nyu Starting monitored process 5 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 13:39:54,552 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:39:54,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:39:54,724 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 13:39:54,752 INFO L134 CoverageAnalysis]: Checked inductivity of 123 backedges. 79 proven. 0 refuted. 0 times theorem prover too weak. 44 trivial. 0 not checked. [2018-11-23 13:39:54,753 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 13:39:54,755 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:39:54,755 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 13:39:54,756 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 13:39:54,756 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 13:39:54,756 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 13:39:54,756 INFO L87 Difference]: Start difference. First operand 2284 states and 3277 transitions. Second operand 3 states. [2018-11-23 13:39:55,047 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:39:55,047 INFO L93 Difference]: Finished difference Result 6570 states and 9429 transitions. [2018-11-23 13:39:55,047 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 13:39:55,047 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 156 [2018-11-23 13:39:55,048 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:39:55,066 INFO L225 Difference]: With dead ends: 6570 [2018-11-23 13:39:55,066 INFO L226 Difference]: Without dead ends: 4310 [2018-11-23 13:39:55,077 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 155 GetRequests, 154 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 13:39:55,081 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4310 states. [2018-11-23 13:39:55,205 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4310 to 4290. [2018-11-23 13:39:55,206 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4290 states. [2018-11-23 13:39:55,217 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4290 states to 4290 states and 6062 transitions. [2018-11-23 13:39:55,218 INFO L78 Accepts]: Start accepts. Automaton has 4290 states and 6062 transitions. Word has length 156 [2018-11-23 13:39:55,218 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:39:55,218 INFO L480 AbstractCegarLoop]: Abstraction has 4290 states and 6062 transitions. [2018-11-23 13:39:55,219 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 13:39:55,219 INFO L276 IsEmpty]: Start isEmpty. Operand 4290 states and 6062 transitions. [2018-11-23 13:39:55,230 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 157 [2018-11-23 13:39:55,230 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:39:55,230 INFO L402 BasicCegarLoop]: trace histogram [8, 8, 8, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:39:55,230 INFO L423 AbstractCegarLoop]: === Iteration 5 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:39:55,230 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:39:55,230 INFO L82 PathProgramCache]: Analyzing trace with hash 200473931, now seen corresponding path program 2 times [2018-11-23 13:39:55,231 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 13:39:55,231 INFO L69 tionRefinementEngine]: Using refinement strategy WalrusRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan/cvc4nyu Starting monitored process 6 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 13:39:55,253 INFO L101 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2018-11-23 13:39:56,242 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2018-11-23 13:39:56,242 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2018-11-23 13:39:56,253 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 13:39:56,281 INFO L134 CoverageAnalysis]: Checked inductivity of 123 backedges. 66 proven. 0 refuted. 0 times theorem prover too weak. 57 trivial. 0 not checked. [2018-11-23 13:39:56,282 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 13:39:56,285 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:39:56,285 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 13:39:56,285 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 13:39:56,285 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 13:39:56,285 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 13:39:56,286 INFO L87 Difference]: Start difference. First operand 4290 states and 6062 transitions. Second operand 3 states. [2018-11-23 13:39:56,487 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:39:56,487 INFO L93 Difference]: Finished difference Result 7742 states and 10810 transitions. [2018-11-23 13:39:56,487 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 13:39:56,487 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 156 [2018-11-23 13:39:56,488 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:39:56,503 INFO L225 Difference]: With dead ends: 7742 [2018-11-23 13:39:56,503 INFO L226 Difference]: Without dead ends: 3476 [2018-11-23 13:39:56,521 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 155 GetRequests, 154 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 13:39:56,524 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3476 states. [2018-11-23 13:39:56,656 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3476 to 3420. [2018-11-23 13:39:56,656 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3420 states. [2018-11-23 13:39:56,665 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3420 states to 3420 states and 4718 transitions. [2018-11-23 13:39:56,666 INFO L78 Accepts]: Start accepts. Automaton has 3420 states and 4718 transitions. Word has length 156 [2018-11-23 13:39:56,667 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:39:56,667 INFO L480 AbstractCegarLoop]: Abstraction has 3420 states and 4718 transitions. [2018-11-23 13:39:56,667 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 13:39:56,667 INFO L276 IsEmpty]: Start isEmpty. Operand 3420 states and 4718 transitions. [2018-11-23 13:39:56,674 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 173 [2018-11-23 13:39:56,674 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:39:56,674 INFO L402 BasicCegarLoop]: trace histogram [8, 8, 8, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:39:56,675 INFO L423 AbstractCegarLoop]: === Iteration 6 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:39:56,675 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:39:56,675 INFO L82 PathProgramCache]: Analyzing trace with hash -1875857936, now seen corresponding path program 1 times [2018-11-23 13:39:56,676 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 13:39:56,676 INFO L69 tionRefinementEngine]: Using refinement strategy WalrusRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan/cvc4nyu Starting monitored process 7 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 13:39:56,693 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-23 13:39:56,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:39:56,865 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 13:39:56,904 INFO L134 CoverageAnalysis]: Checked inductivity of 140 backedges. 53 proven. 0 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2018-11-23 13:39:56,905 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 13:39:56,907 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:39:56,907 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 13:39:56,908 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 13:39:56,908 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 13:39:56,908 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 13:39:56,908 INFO L87 Difference]: Start difference. First operand 3420 states and 4718 transitions. Second operand 3 states. [2018-11-23 13:39:57,287 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:39:57,287 INFO L93 Difference]: Finished difference Result 7260 states and 10088 transitions. [2018-11-23 13:39:57,288 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 13:39:57,288 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 172 [2018-11-23 13:39:57,288 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:39:57,316 INFO L225 Difference]: With dead ends: 7260 [2018-11-23 13:39:57,316 INFO L226 Difference]: Without dead ends: 4462 [2018-11-23 13:39:57,329 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 171 GetRequests, 170 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 13:39:57,333 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4462 states. [2018-11-23 13:39:57,479 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4462 to 4406. [2018-11-23 13:39:57,480 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4406 states. [2018-11-23 13:39:57,495 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4406 states to 4406 states and 6095 transitions. [2018-11-23 13:39:57,496 INFO L78 Accepts]: Start accepts. Automaton has 4406 states and 6095 transitions. Word has length 172 [2018-11-23 13:39:57,496 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:39:57,496 INFO L480 AbstractCegarLoop]: Abstraction has 4406 states and 6095 transitions. [2018-11-23 13:39:57,497 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 13:39:57,497 INFO L276 IsEmpty]: Start isEmpty. Operand 4406 states and 6095 transitions. [2018-11-23 13:39:57,508 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 189 [2018-11-23 13:39:57,508 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:39:57,508 INFO L402 BasicCegarLoop]: trace histogram [8, 8, 8, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:39:57,508 INFO L423 AbstractCegarLoop]: === Iteration 7 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:39:57,508 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:39:57,508 INFO L82 PathProgramCache]: Analyzing trace with hash -2655384, now seen corresponding path program 1 times [2018-11-23 13:39:57,510 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 13:39:57,510 INFO L69 tionRefinementEngine]: Using refinement strategy WalrusRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan/cvc4nyu Starting monitored process 8 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 13:39:57,534 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:39:57,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:39:57,787 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 13:39:57,817 INFO L134 CoverageAnalysis]: Checked inductivity of 124 backedges. 35 proven. 0 refuted. 0 times theorem prover too weak. 89 trivial. 0 not checked. [2018-11-23 13:39:57,817 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 13:39:57,820 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:39:57,820 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 13:39:57,820 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 13:39:57,820 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 13:39:57,821 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 13:39:57,821 INFO L87 Difference]: Start difference. First operand 4406 states and 6095 transitions. Second operand 3 states. [2018-11-23 13:39:58,072 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:39:58,072 INFO L93 Difference]: Finished difference Result 8888 states and 12366 transitions. [2018-11-23 13:39:58,072 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 13:39:58,072 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 188 [2018-11-23 13:39:58,073 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:39:58,097 INFO L225 Difference]: With dead ends: 8888 [2018-11-23 13:39:58,097 INFO L226 Difference]: Without dead ends: 4506 [2018-11-23 13:39:58,110 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 187 GetRequests, 186 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 13:39:58,114 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4506 states. [2018-11-23 13:39:58,256 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4506 to 4466. [2018-11-23 13:39:58,256 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4466 states. [2018-11-23 13:39:58,269 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4466 states to 4466 states and 6155 transitions. [2018-11-23 13:39:58,270 INFO L78 Accepts]: Start accepts. Automaton has 4466 states and 6155 transitions. Word has length 188 [2018-11-23 13:39:58,271 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:39:58,271 INFO L480 AbstractCegarLoop]: Abstraction has 4466 states and 6155 transitions. [2018-11-23 13:39:58,271 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 13:39:58,271 INFO L276 IsEmpty]: Start isEmpty. Operand 4466 states and 6155 transitions. [2018-11-23 13:39:58,282 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 189 [2018-11-23 13:39:58,282 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:39:58,282 INFO L402 BasicCegarLoop]: trace histogram [8, 8, 8, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:39:58,283 INFO L423 AbstractCegarLoop]: === Iteration 8 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:39:58,283 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:39:58,283 INFO L82 PathProgramCache]: Analyzing trace with hash 2108807532, now seen corresponding path program 1 times [2018-11-23 13:39:58,284 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 13:39:58,284 INFO L69 tionRefinementEngine]: Using refinement strategy WalrusRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan/cvc4nyu Starting monitored process 9 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 13:39:58,307 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:39:58,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:39:59,130 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 13:39:59,188 INFO L134 CoverageAnalysis]: Checked inductivity of 124 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 103 trivial. 0 not checked. [2018-11-23 13:39:59,188 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 13:39:59,192 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:39:59,193 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 13:39:59,193 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 13:39:59,193 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 13:39:59,193 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 13:39:59,193 INFO L87 Difference]: Start difference. First operand 4466 states and 6155 transitions. Second operand 5 states. [2018-11-23 13:39:59,362 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:39:59,362 INFO L93 Difference]: Finished difference Result 8968 states and 12865 transitions. [2018-11-23 13:39:59,362 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 13:39:59,362 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 188 [2018-11-23 13:39:59,363 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:39:59,379 INFO L225 Difference]: With dead ends: 8968 [2018-11-23 13:39:59,380 INFO L226 Difference]: Without dead ends: 4526 [2018-11-23 13:39:59,392 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 187 GetRequests, 184 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 13:39:59,396 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4526 states. [2018-11-23 13:39:59,485 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4526 to 4516. [2018-11-23 13:39:59,485 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4516 states. [2018-11-23 13:39:59,494 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4516 states to 4516 states and 6219 transitions. [2018-11-23 13:39:59,495 INFO L78 Accepts]: Start accepts. Automaton has 4516 states and 6219 transitions. Word has length 188 [2018-11-23 13:39:59,495 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:39:59,495 INFO L480 AbstractCegarLoop]: Abstraction has 4516 states and 6219 transitions. [2018-11-23 13:39:59,495 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 13:39:59,496 INFO L276 IsEmpty]: Start isEmpty. Operand 4516 states and 6219 transitions. [2018-11-23 13:39:59,502 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 194 [2018-11-23 13:39:59,503 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:39:59,503 INFO L402 BasicCegarLoop]: trace histogram [8, 8, 7, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:39:59,503 INFO L423 AbstractCegarLoop]: === Iteration 9 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:39:59,503 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:39:59,503 INFO L82 PathProgramCache]: Analyzing trace with hash -370053368, now seen corresponding path program 1 times [2018-11-23 13:39:59,504 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 13:39:59,504 INFO L69 tionRefinementEngine]: Using refinement strategy WalrusRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan/cvc4nyu Starting monitored process 10 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 13:39:59,523 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:39:59,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:40:00,090 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 13:40:00,214 INFO L134 CoverageAnalysis]: Checked inductivity of 124 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 103 trivial. 0 not checked. [2018-11-23 13:40:00,214 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 13:40:00,218 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:40:00,218 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2018-11-23 13:40:00,218 INFO L459 AbstractCegarLoop]: Interpolant automaton has 11 states [2018-11-23 13:40:00,218 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2018-11-23 13:40:00,218 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=91, Unknown=0, NotChecked=0, Total=110 [2018-11-23 13:40:00,219 INFO L87 Difference]: Start difference. First operand 4516 states and 6219 transitions. Second operand 11 states. [2018-11-23 13:40:00,493 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:40:00,493 INFO L93 Difference]: Finished difference Result 9108 states and 12991 transitions. [2018-11-23 13:40:00,493 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-11-23 13:40:00,494 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 193 [2018-11-23 13:40:00,494 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:40:00,513 INFO L225 Difference]: With dead ends: 9108 [2018-11-23 13:40:00,513 INFO L226 Difference]: Without dead ends: 4616 [2018-11-23 13:40:00,527 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 196 GetRequests, 184 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=31, Invalid=151, Unknown=0, NotChecked=0, Total=182 [2018-11-23 13:40:00,530 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4616 states. [2018-11-23 13:40:00,613 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4616 to 4576. [2018-11-23 13:40:00,613 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4576 states. [2018-11-23 13:40:00,622 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4576 states to 4576 states and 6274 transitions. [2018-11-23 13:40:00,623 INFO L78 Accepts]: Start accepts. Automaton has 4576 states and 6274 transitions. Word has length 193 [2018-11-23 13:40:00,623 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:40:00,623 INFO L480 AbstractCegarLoop]: Abstraction has 4576 states and 6274 transitions. [2018-11-23 13:40:00,623 INFO L481 AbstractCegarLoop]: Interpolant automaton has 11 states. [2018-11-23 13:40:00,623 INFO L276 IsEmpty]: Start isEmpty. Operand 4576 states and 6274 transitions. [2018-11-23 13:40:00,632 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 219 [2018-11-23 13:40:00,632 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:40:00,632 INFO L402 BasicCegarLoop]: trace histogram [9, 9, 8, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:40:00,633 INFO L423 AbstractCegarLoop]: === Iteration 10 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:40:00,633 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:40:00,633 INFO L82 PathProgramCache]: Analyzing trace with hash -1924364236, now seen corresponding path program 1 times [2018-11-23 13:40:00,634 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 13:40:00,634 INFO L69 tionRefinementEngine]: Using refinement strategy WalrusRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan/cvc4nyu Starting monitored process 11 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 13:40:00,655 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:40:01,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:40:01,328 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 13:40:01,433 INFO L134 CoverageAnalysis]: Checked inductivity of 162 backedges. 59 proven. 0 refuted. 0 times theorem prover too weak. 103 trivial. 0 not checked. [2018-11-23 13:40:01,433 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 13:40:01,437 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:40:01,437 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2018-11-23 13:40:01,438 INFO L459 AbstractCegarLoop]: Interpolant automaton has 11 states [2018-11-23 13:40:01,438 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2018-11-23 13:40:01,438 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=91, Unknown=0, NotChecked=0, Total=110 [2018-11-23 13:40:01,438 INFO L87 Difference]: Start difference. First operand 4576 states and 6274 transitions. Second operand 11 states. [2018-11-23 13:40:01,821 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:40:01,821 INFO L93 Difference]: Finished difference Result 9338 states and 13285 transitions. [2018-11-23 13:40:01,823 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2018-11-23 13:40:01,823 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 218 [2018-11-23 13:40:01,823 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:40:01,839 INFO L225 Difference]: With dead ends: 9338 [2018-11-23 13:40:01,839 INFO L226 Difference]: Without dead ends: 4786 [2018-11-23 13:40:01,855 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 220 GetRequests, 209 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=129, Unknown=0, NotChecked=0, Total=156 [2018-11-23 13:40:01,860 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4786 states. [2018-11-23 13:40:01,998 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4786 to 4706. [2018-11-23 13:40:01,998 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4706 states. [2018-11-23 13:40:02,012 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4706 states to 4706 states and 6477 transitions. [2018-11-23 13:40:02,014 INFO L78 Accepts]: Start accepts. Automaton has 4706 states and 6477 transitions. Word has length 218 [2018-11-23 13:40:02,014 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:40:02,014 INFO L480 AbstractCegarLoop]: Abstraction has 4706 states and 6477 transitions. [2018-11-23 13:40:02,014 INFO L481 AbstractCegarLoop]: Interpolant automaton has 11 states. [2018-11-23 13:40:02,014 INFO L276 IsEmpty]: Start isEmpty. Operand 4706 states and 6477 transitions. [2018-11-23 13:40:02,028 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 213 [2018-11-23 13:40:02,028 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:40:02,029 INFO L402 BasicCegarLoop]: trace histogram [9, 9, 8, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:40:02,029 INFO L423 AbstractCegarLoop]: === Iteration 11 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:40:02,029 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:40:02,029 INFO L82 PathProgramCache]: Analyzing trace with hash 1697177730, now seen corresponding path program 1 times [2018-11-23 13:40:02,030 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 13:40:02,030 INFO L69 tionRefinementEngine]: Using refinement strategy WalrusRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan/cvc4nyu Starting monitored process 12 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 12 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 13:40:02,055 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:40:03,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 13:40:06,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 13:40:06,703 INFO L469 BasicCegarLoop]: Counterexample might be feasible ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv0 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv0 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv0 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv0 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv0 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv0 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv0 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv0 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv0 32), |#t~string84.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32), |old(#t~string114.base)|=(_ bv0 32), |old(#t~string114.offset)|=(_ bv0 32), |old(#t~string121.base)|=(_ bv0 32), |old(#t~string121.offset)|=(_ bv0 32), |old(#t~string211.base)|=(_ bv0 32), |old(#t~string211.offset)|=(_ bv0 32), |old(#t~string22.base)|=(_ bv0 32), |old(#t~string22.offset)|=(_ bv0 32), |old(#t~string237.base)|=(_ bv0 32), |old(#t~string237.offset)|=(_ bv0 32), |old(#t~string64.base)|=(_ bv0 32), |old(#t~string64.offset)|=(_ bv0 32), |old(#t~string65.base)|=(_ bv0 32), |old(#t~string65.offset)|=(_ bv0 32), |old(#t~string66.base)|=(_ bv0 32), |old(#t~string66.offset)|=(_ bv0 32), |old(#t~string84.base)|=(_ bv0 32), |old(#t~string84.offset)|=(_ bv0 32), |old(~#cp_table~0.base)|=(_ bv0 32), |old(~#cp_table~0.offset)|=(_ bv0 32), |old(~#ppp_header_ops~0.base)|=(_ bv0 32), |old(~#ppp_header_ops~0.offset)|=(_ bv0 32), |old(~#proto~0.base)|=(_ bv0 32), |old(~#proto~0.offset)|=(_ bv0 32), |old(~#set_impl~0.base)|=(_ bv0 32), |old(~#set_impl~0.offset)|=(_ bv0 32), |old(~#tx_queue~0.base)|=(_ bv0 32), |old(~#tx_queue~0.offset)|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~LDV_SKBS~0.base)|=(_ bv0 32), |old(~LDV_SKBS~0.offset)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#cp_table~0.base|=(_ bv0 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv0 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv0 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv0 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv0 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv0 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];call #t~string22.base, #t~string22.offset := #Ultimate.alloc(22bv32);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(4bv32);call write~init~intINTTYPE1(76bv8, #t~string64.base, #t~string64.offset, 1bv32);call write~init~intINTTYPE1(67bv8, #t~string64.base, ~bvadd32(1bv32, #t~string64.offset), 1bv32);call write~init~intINTTYPE1(80bv8, #t~string64.base, ~bvadd32(2bv32, #t~string64.offset), 1bv32);call write~init~intINTTYPE1(0bv8, #t~string64.base, ~bvadd32(3bv32, #t~string64.offset), 1bv32);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(5bv32);call write~init~intINTTYPE1(73bv8, #t~string65.base, #t~string65.offset, 1bv32);call write~init~intINTTYPE1(80bv8, #t~string65.base, ~bvadd32(1bv32, #t~string65.offset), 1bv32);call write~init~intINTTYPE1(67bv8, #t~string65.base, ~bvadd32(2bv32, #t~string65.offset), 1bv32);call write~init~intINTTYPE1(80bv8, #t~string65.base, ~bvadd32(3bv32, #t~string65.offset), 1bv32);call write~init~intINTTYPE1(0bv8, #t~string65.base, ~bvadd32(4bv32, #t~string65.offset), 1bv32);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7bv32);call write~init~intINTTYPE1(73bv8, #t~string66.base, #t~string66.offset, 1bv32);call write~init~intINTTYPE1(80bv8, #t~string66.base, ~bvadd32(1bv32, #t~string66.offset), 1bv32);call write~init~intINTTYPE1(86bv8, #t~string66.base, ~bvadd32(2bv32, #t~string66.offset), 1bv32);call write~init~intINTTYPE1(54bv8, #t~string66.base, ~bvadd32(3bv32, #t~string66.offset), 1bv32);call write~init~intINTTYPE1(67bv8, #t~string66.base, ~bvadd32(4bv32, #t~string66.offset), 1bv32);call write~init~intINTTYPE1(80bv8, #t~string66.base, ~bvadd32(5bv32, #t~string66.offset), 1bv32);call write~init~intINTTYPE1(0bv8, #t~string66.base, ~bvadd32(6bv32, #t~string66.offset), 1bv32);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(30bv32);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(7bv32);call write~init~intINTTYPE1(37bv8, #t~string114.base, #t~string114.offset, 1bv32);call write~init~intINTTYPE1(115bv8, #t~string114.base, ~bvadd32(1bv32, #t~string114.offset), 1bv32);call write~init~intINTTYPE1(32bv8, #t~string114.base, ~bvadd32(2bv32, #t~string114.offset), 1bv32);call write~init~intINTTYPE1(117bv8, #t~string114.base, ~bvadd32(3bv32, #t~string114.offset), 1bv32);call write~init~intINTTYPE1(112bv8, #t~string114.base, ~bvadd32(4bv32, #t~string114.offset), 1bv32);call write~init~intINTTYPE1(10bv8, #t~string114.base, ~bvadd32(5bv32, #t~string114.offset), 1bv32);call write~init~intINTTYPE1(0bv8, #t~string114.base, ~bvadd32(6bv32, #t~string114.offset), 1bv32);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(9bv32);call #t~string211.base, #t~string211.offset := #Ultimate.alloc(11bv32);call #t~string237.base, #t~string237.offset := #Ultimate.alloc(21bv32);~LDV_IN_INTERRUPT~0 := 1bv32;~ldv_state_variable_0~0 := 0bv32;~ldv_state_variable_3~0 := 0bv32;~ldv_timer_state_1~0 := 0bv32;~ldv_state_variable_2~0 := 0bv32;~ref_cnt~0 := 0bv32;~ldv_state_variable_1~0 := 0bv32;call ~#cp_table~0.base, ~#cp_table~0.offset := #Ultimate.alloc(364bv32);call write~init~intINTTYPE4(163bv32, ~#cp_table~0.base, ~#cp_table~0.offset, 4bv32);call write~init~intINTTYPE4(16bv32, ~#cp_table~0.base, ~bvadd32(4bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(16bv32, ~#cp_table~0.base, ~bvadd32(8bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(16bv32, ~#cp_table~0.base, ~bvadd32(12bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(16bv32, ~#cp_table~0.base, ~bvadd32(16bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(16bv32, ~#cp_table~0.base, ~bvadd32(20bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(16bv32, ~#cp_table~0.base, ~bvadd32(24bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(16bv32, ~#cp_table~0.base, ~bvadd32(28bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(0bv32, ~#cp_table~0.base, ~bvadd32(32bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(0bv32, ~#cp_table~0.base, ~bvadd32(36bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(0bv32, ~#cp_table~0.base, ~bvadd32(40bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(0bv32, ~#cp_table~0.base, ~bvadd32(44bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(0bv32, ~#cp_table~0.base, ~bvadd32(48bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(0bv32, ~#cp_table~0.base, ~bvadd32(52bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(16bv32, ~#cp_table~0.base, ~bvadd32(56bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(16bv32, ~#cp_table~0.base, ~bvadd32(60bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(1026bv32, ~#cp_table~0.base, ~bvadd32(64bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(131bv32, ~#cp_table~0.base, ~bvadd32(68bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(131bv32, ~#cp_table~0.base, ~bvadd32(72bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(133bv32, ~#cp_table~0.base, ~bvadd32(76bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(16bv32, ~#cp_table~0.base, ~bvadd32(80bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(16bv32, ~#cp_table~0.base, ~bvadd32(84bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(16bv32, ~#cp_table~0.base, ~bvadd32(88bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(1bv32, ~#cp_table~0.base, ~bvadd32(92bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(1bv32, ~#cp_table~0.base, ~bvadd32(96bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(1bv32, ~#cp_table~0.base, ~bvadd32(100bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(1bv32, ~#cp_table~0.base, ~bvadd32(104bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(16bv32, ~#cp_table~0.base, ~bvadd32(108bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(2048bv32, ~#cp_table~0.base, ~bvadd32(112bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(421bv32, ~#cp_table~0.base, ~bvadd32(116bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(2bv32, ~#cp_table~0.base, ~bvadd32(120bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(261bv32, ~#cp_table~0.base, ~bvadd32(124bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(262bv32, ~#cp_table~0.base, ~bvadd32(128bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(261bv32, ~#cp_table~0.base, ~bvadd32(132bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(389bv32, ~#cp_table~0.base, ~bvadd32(136bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(2048bv32, ~#cp_table~0.base, ~bvadd32(140bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(675bv32, ~#cp_table~0.base, ~bvadd32(144bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(2bv32, ~#cp_table~0.base, ~bvadd32(148bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(515bv32, ~#cp_table~0.base, ~bvadd32(152bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(516bv32, ~#cp_table~0.base, ~bvadd32(156bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(515bv32, ~#cp_table~0.base, ~bvadd32(160bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(643bv32, ~#cp_table~0.base, ~bvadd32(164bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(2048bv32, ~#cp_table~0.base, ~bvadd32(168bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(2049bv32, ~#cp_table~0.base, ~bvadd32(172bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(2bv32, ~#cp_table~0.base, ~bvadd32(176bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(36bv32, ~#cp_table~0.base, ~bvadd32(180bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(131bv32, ~#cp_table~0.base, ~bvadd32(184bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(6bv32, ~#cp_table~0.base, ~bvadd32(188bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(131bv32, ~#cp_table~0.base, ~bvadd32(192bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(2048bv32, ~#cp_table~0.base, ~bvadd32(196bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(2049bv32, ~#cp_table~0.base, ~bvadd32(200bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(2bv32, ~#cp_table~0.base, ~bvadd32(204bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(163bv32, ~#cp_table~0.base, ~bvadd32(208bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(131bv32, ~#cp_table~0.base, ~bvadd32(212bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(165bv32, ~#cp_table~0.base, ~bvadd32(216bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(131bv32, ~#cp_table~0.base, ~bvadd32(220bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(2048bv32, ~#cp_table~0.base, ~bvadd32(224bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(2049bv32, ~#cp_table~0.base, ~bvadd32(228bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(2050bv32, ~#cp_table~0.base, ~bvadd32(232bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(2051bv32, ~#cp_table~0.base, ~bvadd32(236bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(2051bv32, ~#cp_table~0.base, ~bvadd32(240bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(2051bv32, ~#cp_table~0.base, ~bvadd32(244bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(2114bv32, ~#cp_table~0.base, ~bvadd32(248bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(0bv32, ~#cp_table~0.base, ~bvadd32(252bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(1bv32, ~#cp_table~0.base, ~bvadd32(256bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(1bv32, ~#cp_table~0.base, ~bvadd32(260bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(3bv32, ~#cp_table~0.base, ~bvadd32(264bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(3bv32, ~#cp_table~0.base, ~bvadd32(268bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(5bv32, ~#cp_table~0.base, ~bvadd32(272bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(131bv32, ~#cp_table~0.base, ~bvadd32(276bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(4096bv32, ~#cp_table~0.base, ~bvadd32(280bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(4097bv32, ~#cp_table~0.base, ~bvadd32(284bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(4098bv32, ~#cp_table~0.base, ~bvadd32(288bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(4099bv32, ~#cp_table~0.base, ~bvadd32(292bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(4100bv32, ~#cp_table~0.base, ~bvadd32(296bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(4101bv32, ~#cp_table~0.base, ~bvadd32(300bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(4102bv32, ~#cp_table~0.base, ~bvadd32(304bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(0bv32, ~#cp_table~0.base, ~bvadd32(308bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(1bv32, ~#cp_table~0.base, ~bvadd32(312bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(2bv32, ~#cp_table~0.base, ~bvadd32(316bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(3bv32, ~#cp_table~0.base, ~bvadd32(320bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(3bv32, ~#cp_table~0.base, ~bvadd32(324bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(5bv32, ~#cp_table~0.base, ~bvadd32(328bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(6bv32, ~#cp_table~0.base, ~bvadd32(332bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(0bv32, ~#cp_table~0.base, ~bvadd32(336bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(1bv32, ~#cp_table~0.base, ~bvadd32(340bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(1bv32, ~#cp_table~0.base, ~bvadd32(344bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(1bv32, ~#cp_table~0.base, ~bvadd32(348bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(1bv32, ~#cp_table~0.base, ~bvadd32(352bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(1bv32, ~#cp_table~0.base, ~bvadd32(356bv32, ~#cp_table~0.offset), 4bv32);call write~init~intINTTYPE4(1058bv32, ~#cp_table~0.base, ~bvadd32(360bv32, ~#cp_table~0.offset), 4bv32);~ldv_retval_0~0 := 0bv32;~last_index~0 := 0bv32;~proto_group1~0.base, ~proto_group1~0.offset := 0bv32, 0bv32;~proto_group0~0.base, ~proto_group0~0.offset := 0bv32, 0bv32;~ldv_timer_list_1~0.base, ~ldv_timer_list_1~0.offset := 0bv32, 0bv32;call ~#tx_queue~0.base, ~#tx_queue~0.offset := #Ultimate.alloc(88bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#tx_queue~0.base, ~#tx_queue~0.offset, 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#tx_queue~0.base, ~bvadd32(8bv32, ~#tx_queue~0.offset), 8bv32);call write~init~intINTTYPE4(0bv32, ~#tx_queue~0.base, ~bvadd32(16bv32, ~#tx_queue~0.offset), 4bv32);call write~init~intINTTYPE4(0bv32, ~#tx_queue~0.base, ~bvadd32(20bv32, ~#tx_queue~0.offset), 4bv32);call write~init~intINTTYPE4(0bv32, ~#tx_queue~0.base, ~bvadd32(24bv32, ~#tx_queue~0.offset), 4bv32);call write~init~intINTTYPE4(0bv32, ~#tx_queue~0.base, ~bvadd32(28bv32, ~#tx_queue~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#tx_queue~0.base, ~bvadd32(32bv32, ~#tx_queue~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#tx_queue~0.base, ~bvadd32(40bv32, ~#tx_queue~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#tx_queue~0.base, ~bvadd32(48bv32, ~#tx_queue~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#tx_queue~0.base, ~bvadd32(56bv32, ~#tx_queue~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#tx_queue~0.base, ~bvadd32(64bv32, ~#tx_queue~0.offset), 8bv32);call write~init~intINTTYPE4(0bv32, ~#tx_queue~0.base, ~bvadd32(72bv32, ~#tx_queue~0.offset), 4bv32);call write~init~intINTTYPE8(0bv64, ~#tx_queue~0.base, ~bvadd32(76bv32, ~#tx_queue~0.offset), 8bv32);call ~#proto~0.base, ~#proto~0.offset := #Ultimate.alloc(88bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#proto~0.base, ~#proto~0.offset, 8bv32);call write~init~$Pointer$(#funAddr~ppp_close.base, #funAddr~ppp_close.offset, ~#proto~0.base, ~bvadd32(8bv32, ~#proto~0.offset), 8bv32);call write~init~$Pointer$(#funAddr~ppp_start.base, #funAddr~ppp_start.offset, ~#proto~0.base, ~bvadd32(16bv32, ~#proto~0.offset), 8bv32);call write~init~$Pointer$(#funAddr~ppp_stop.base, #funAddr~ppp_stop.offset, ~#proto~0.base, ~bvadd32(24bv32, ~#proto~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#proto~0.base, ~bvadd32(32bv32, ~#proto~0.offset), 8bv32);call write~init~$Pointer$(#funAddr~ppp_ioctl.base, #funAddr~ppp_ioctl.offset, ~#proto~0.base, ~bvadd32(40bv32, ~#proto~0.offset), 8bv32);call write~init~$Pointer$(#funAddr~ppp_type_trans.base, #funAddr~ppp_type_trans.offset, ~#proto~0.base, ~bvadd32(48bv32, ~#proto~0.offset), 8bv32);call write~init~$Pointer$(#funAddr~ppp_rx.base, #funAddr~ppp_rx.offset, ~#proto~0.base, ~bvadd32(56bv32, ~#proto~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#proto~0.base, ~bvadd32(64bv32, ~#proto~0.offset), 8bv32);call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#proto~0.base, ~bvadd32(72bv32, ~#proto~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#proto~0.base, ~bvadd32(80bv32, ~#proto~0.offset), 8bv32);call ~#ppp_header_ops~0.base, ~#ppp_header_ops~0.offset := #Ultimate.alloc(40bv32);call write~init~$Pointer$(#funAddr~ppp_hard_header.base, #funAddr~ppp_hard_header.offset, ~#ppp_header_ops~0.base, ~#ppp_header_ops~0.offset, 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#ppp_header_ops~0.base, ~bvadd32(8bv32, ~#ppp_header_ops~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#ppp_header_ops~0.base, ~bvadd32(16bv32, ~#ppp_header_ops~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#ppp_header_ops~0.base, ~bvadd32(24bv32, ~#ppp_header_ops~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#ppp_header_ops~0.base, ~bvadd32(32bv32, ~#ppp_header_ops~0.offset), 8bv32);call ~#set_impl~0.base, ~#set_impl~0.offset := #Ultimate.alloc(120bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#set_impl~0.base, ~#set_impl~0.offset, 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#set_impl~0.base, ~bvadd32(8bv32, ~#set_impl~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#set_impl~0.base, ~bvadd32(16bv32, ~#set_impl~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#set_impl~0.base, ~bvadd32(24bv32, ~#set_impl~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#set_impl~0.base, ~bvadd32(32bv32, ~#set_impl~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#set_impl~0.base, ~bvadd32(40bv32, ~#set_impl~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#set_impl~0.base, ~bvadd32(48bv32, ~#set_impl~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#set_impl~0.base, ~bvadd32(56bv32, ~#set_impl~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#set_impl~0.base, ~bvadd32(64bv32, ~#set_impl~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#set_impl~0.base, ~bvadd32(72bv32, ~#set_impl~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#set_impl~0.base, ~bvadd32(80bv32, ~#set_impl~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#set_impl~0.base, ~bvadd32(88bv32, ~#set_impl~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#set_impl~0.base, ~bvadd32(96bv32, ~#set_impl~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#set_impl~0.base, ~bvadd32(104bv32, ~#set_impl~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#set_impl~0.base, ~bvadd32(112bv32, ~#set_impl~0.offset), 8bv32);~LDV_SKBS~0.base, ~LDV_SKBS~0.offset := 0bv32, 0bv32; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32), |old(#t~string114.base)|=(_ bv0 32), |old(#t~string114.offset)|=(_ bv0 32), |old(#t~string121.base)|=(_ bv0 32), |old(#t~string121.offset)|=(_ bv0 32), |old(#t~string211.base)|=(_ bv0 32), |old(#t~string211.offset)|=(_ bv0 32), |old(#t~string22.base)|=(_ bv0 32), |old(#t~string22.offset)|=(_ bv0 32), |old(#t~string237.base)|=(_ bv0 32), |old(#t~string237.offset)|=(_ bv0 32), |old(#t~string64.base)|=(_ bv0 32), |old(#t~string64.offset)|=(_ bv0 32), |old(#t~string65.base)|=(_ bv0 32), |old(#t~string65.offset)|=(_ bv0 32), |old(#t~string66.base)|=(_ bv0 32), |old(#t~string66.offset)|=(_ bv0 32), |old(#t~string84.base)|=(_ bv0 32), |old(#t~string84.offset)|=(_ bv0 32), |old(~#cp_table~0.base)|=(_ bv0 32), |old(~#cp_table~0.offset)|=(_ bv0 32), |old(~#ppp_header_ops~0.base)|=(_ bv0 32), |old(~#ppp_header_ops~0.offset)|=(_ bv0 32), |old(~#proto~0.base)|=(_ bv0 32), |old(~#proto~0.offset)|=(_ bv0 32), |old(~#set_impl~0.base)|=(_ bv0 32), |old(~#set_impl~0.offset)|=(_ bv0 32), |old(~#tx_queue~0.base)|=(_ bv0 32), |old(~#tx_queue~0.offset)|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~LDV_SKBS~0.base)|=(_ bv0 32), |old(~LDV_SKBS~0.offset)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume true; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32), |old(#t~string114.base)|=(_ bv0 32), |old(#t~string114.offset)|=(_ bv0 32), |old(#t~string121.base)|=(_ bv0 32), |old(#t~string121.offset)|=(_ bv0 32), |old(#t~string211.base)|=(_ bv0 32), |old(#t~string211.offset)|=(_ bv0 32), |old(#t~string22.base)|=(_ bv0 32), |old(#t~string22.offset)|=(_ bv0 32), |old(#t~string237.base)|=(_ bv0 32), |old(#t~string237.offset)|=(_ bv0 32), |old(#t~string64.base)|=(_ bv0 32), |old(#t~string64.offset)|=(_ bv0 32), |old(#t~string65.base)|=(_ bv0 32), |old(#t~string65.offset)|=(_ bv0 32), |old(#t~string66.base)|=(_ bv0 32), |old(#t~string66.offset)|=(_ bv0 32), |old(#t~string84.base)|=(_ bv0 32), |old(#t~string84.offset)|=(_ bv0 32), |old(~#cp_table~0.base)|=(_ bv0 32), |old(~#cp_table~0.offset)|=(_ bv0 32), |old(~#ppp_header_ops~0.base)|=(_ bv0 32), |old(~#ppp_header_ops~0.offset)|=(_ bv0 32), |old(~#proto~0.base)|=(_ bv0 32), |old(~#proto~0.offset)|=(_ bv0 32), |old(~#set_impl~0.base)|=(_ bv0 32), |old(~#set_impl~0.offset)|=(_ bv0 32), |old(~#tx_queue~0.base)|=(_ bv0 32), |old(~#tx_queue~0.offset)|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~LDV_SKBS~0.base)|=(_ bv0 32), |old(~LDV_SKBS~0.offset)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] RET #1649#return; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call #t~ret298 := main(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] havoc ~ldvarg0~0.base, ~ldvarg0~0.offset;havoc ~tmp~20.base, ~tmp~20.offset;havoc ~ldvarg1~0;havoc ~tmp___0~9;havoc ~ldvarg4~0;havoc ~tmp___1~3;havoc ~ldvarg3~0.base, ~ldvarg3~0.offset;havoc ~tmp___2~5.base, ~tmp___2~5.offset;havoc ~ldvarg5~0.base, ~ldvarg5~0.offset;havoc ~tmp___3~2.base, ~tmp___3~2.offset;havoc ~ldvarg2~0.base, ~ldvarg2~0.offset;havoc ~tmp___4~3.base, ~tmp___4~3.offset;havoc ~ldvarg6~0.base, ~ldvarg6~0.offset;havoc ~tmp___5~1.base, ~tmp___5~1.offset;havoc ~tmp___6~1;havoc ~tmp___7~1;havoc ~tmp___8~0;havoc ~tmp___9~0; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call #t~ret245.base, #t~ret245.offset := ldv_zalloc(40bv32); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv40 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~size := #in~size;havoc ~p~1.base, ~p~1.offset;havoc ~tmp~2.base, ~tmp~2.offset;havoc ~tmp___0~1;~tmp___0~1 := #t~nondet38;havoc #t~nondet38; VAL [ldv_zalloc_~size=(_ bv40 32), ldv_zalloc_~tmp___0~1=(_ bv1 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv40 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume 0bv32 != ~tmp___0~1;#res.base, #res.offset := 0bv32, 0bv32; VAL [ldv_zalloc_~size=(_ bv40 32), ldv_zalloc_~tmp___0~1=(_ bv1 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv40 32), |ldv_zalloc_#res.base|=(_ bv0 32), |ldv_zalloc_#res.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume true; VAL [ldv_zalloc_~size=(_ bv40 32), ldv_zalloc_~tmp___0~1=(_ bv1 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv40 32), |ldv_zalloc_#res.base|=(_ bv0 32), |ldv_zalloc_#res.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] RET #1467#return; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |main_#t~ret245.base|=(_ bv0 32), |main_#t~ret245.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~tmp~20.base, ~tmp~20.offset := #t~ret245.base, #t~ret245.offset;havoc #t~ret245.base, #t~ret245.offset;~ldvarg0~0.base, ~ldvarg0~0.offset := ~tmp~20.base, ~tmp~20.offset;~tmp___0~9 := #t~nondet246;havoc #t~nondet246;~ldvarg1~0 := ~tmp___0~9;~tmp___1~3 := #t~nondet247;havoc #t~nondet247;~ldvarg4~0 := ~tmp___1~3; VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call #t~ret248.base, #t~ret248.offset := ldv_zalloc(232bv32); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv232 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~size := #in~size;havoc ~p~1.base, ~p~1.offset;havoc ~tmp~2.base, ~tmp~2.offset;havoc ~tmp___0~1;~tmp___0~1 := #t~nondet38;havoc #t~nondet38; VAL [ldv_zalloc_~size=(_ bv232 32), ldv_zalloc_~tmp___0~1=(_ bv1 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv232 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume 0bv32 != ~tmp___0~1;#res.base, #res.offset := 0bv32, 0bv32; VAL [ldv_zalloc_~size=(_ bv232 32), ldv_zalloc_~tmp___0~1=(_ bv1 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv232 32), |ldv_zalloc_#res.base|=(_ bv0 32), |ldv_zalloc_#res.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume true; VAL [ldv_zalloc_~size=(_ bv232 32), ldv_zalloc_~tmp___0~1=(_ bv1 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv232 32), |ldv_zalloc_#res.base|=(_ bv0 32), |ldv_zalloc_#res.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] RET #1469#return; VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |main_#t~ret248.base|=(_ bv0 32), |main_#t~ret248.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~tmp___2~5.base, ~tmp___2~5.offset := #t~ret248.base, #t~ret248.offset;havoc #t~ret248.base, #t~ret248.offset;~ldvarg3~0.base, ~ldvarg3~0.offset := ~tmp___2~5.base, ~tmp___2~5.offset; VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg3~0.base=(_ bv0 32), main_~ldvarg3~0.offset=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp___2~5.base=(_ bv0 32), main_~tmp___2~5.offset=(_ bv0 32), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call #t~ret249.base, #t~ret249.offset := ldv_zalloc(3264bv32); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv3264 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~size := #in~size;havoc ~p~1.base, ~p~1.offset;havoc ~tmp~2.base, ~tmp~2.offset;havoc ~tmp___0~1;~tmp___0~1 := #t~nondet38;havoc #t~nondet38; VAL [ldv_zalloc_~size=(_ bv3264 32), ldv_zalloc_~tmp___0~1=(_ bv1 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv3264 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume 0bv32 != ~tmp___0~1;#res.base, #res.offset := 0bv32, 0bv32; VAL [ldv_zalloc_~size=(_ bv3264 32), ldv_zalloc_~tmp___0~1=(_ bv1 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv3264 32), |ldv_zalloc_#res.base|=(_ bv0 32), |ldv_zalloc_#res.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume true; VAL [ldv_zalloc_~size=(_ bv3264 32), ldv_zalloc_~tmp___0~1=(_ bv1 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv3264 32), |ldv_zalloc_#res.base|=(_ bv0 32), |ldv_zalloc_#res.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] RET #1471#return; VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg3~0.base=(_ bv0 32), main_~ldvarg3~0.offset=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp___2~5.base=(_ bv0 32), main_~tmp___2~5.offset=(_ bv0 32), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |main_#t~ret249.base|=(_ bv0 32), |main_#t~ret249.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~tmp___3~2.base, ~tmp___3~2.offset := #t~ret249.base, #t~ret249.offset;havoc #t~ret249.base, #t~ret249.offset;~ldvarg5~0.base, ~ldvarg5~0.offset := ~tmp___3~2.base, ~tmp___3~2.offset; VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg3~0.base=(_ bv0 32), main_~ldvarg3~0.offset=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~ldvarg5~0.base=(_ bv0 32), main_~ldvarg5~0.offset=(_ bv0 32), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp___2~5.base=(_ bv0 32), main_~tmp___2~5.offset=(_ bv0 32), main_~tmp___3~2.base=(_ bv0 32), main_~tmp___3~2.offset=(_ bv0 32), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call #t~ret250.base, #t~ret250.offset := ldv_zalloc(1bv32); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv1 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~size := #in~size;havoc ~p~1.base, ~p~1.offset;havoc ~tmp~2.base, ~tmp~2.offset;havoc ~tmp___0~1;~tmp___0~1 := #t~nondet38;havoc #t~nondet38; VAL [ldv_zalloc_~size=(_ bv1 32), ldv_zalloc_~tmp___0~1=(_ bv1 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv1 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume 0bv32 != ~tmp___0~1;#res.base, #res.offset := 0bv32, 0bv32; VAL [ldv_zalloc_~size=(_ bv1 32), ldv_zalloc_~tmp___0~1=(_ bv1 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv1 32), |ldv_zalloc_#res.base|=(_ bv0 32), |ldv_zalloc_#res.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume true; VAL [ldv_zalloc_~size=(_ bv1 32), ldv_zalloc_~tmp___0~1=(_ bv1 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv1 32), |ldv_zalloc_#res.base|=(_ bv0 32), |ldv_zalloc_#res.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] RET #1473#return; VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg3~0.base=(_ bv0 32), main_~ldvarg3~0.offset=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~ldvarg5~0.base=(_ bv0 32), main_~ldvarg5~0.offset=(_ bv0 32), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp___2~5.base=(_ bv0 32), main_~tmp___2~5.offset=(_ bv0 32), main_~tmp___3~2.base=(_ bv0 32), main_~tmp___3~2.offset=(_ bv0 32), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |main_#t~ret250.base|=(_ bv0 32), |main_#t~ret250.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~tmp___4~3.base, ~tmp___4~3.offset := #t~ret250.base, #t~ret250.offset;havoc #t~ret250.base, #t~ret250.offset;~ldvarg2~0.base, ~ldvarg2~0.offset := ~tmp___4~3.base, ~tmp___4~3.offset; VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg2~0.base=(_ bv0 32), main_~ldvarg2~0.offset=(_ bv0 32), main_~ldvarg3~0.base=(_ bv0 32), main_~ldvarg3~0.offset=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~ldvarg5~0.base=(_ bv0 32), main_~ldvarg5~0.offset=(_ bv0 32), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp___2~5.base=(_ bv0 32), main_~tmp___2~5.offset=(_ bv0 32), main_~tmp___3~2.base=(_ bv0 32), main_~tmp___3~2.offset=(_ bv0 32), main_~tmp___4~3.base=(_ bv0 32), main_~tmp___4~3.offset=(_ bv0 32), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call #t~ret251.base, #t~ret251.offset := ldv_zalloc(1bv32); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv1 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~size := #in~size;havoc ~p~1.base, ~p~1.offset;havoc ~tmp~2.base, ~tmp~2.offset;havoc ~tmp___0~1;~tmp___0~1 := #t~nondet38;havoc #t~nondet38; VAL [ldv_zalloc_~size=(_ bv1 32), ldv_zalloc_~tmp___0~1=(_ bv1 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv1 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume 0bv32 != ~tmp___0~1;#res.base, #res.offset := 0bv32, 0bv32; VAL [ldv_zalloc_~size=(_ bv1 32), ldv_zalloc_~tmp___0~1=(_ bv1 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv1 32), |ldv_zalloc_#res.base|=(_ bv0 32), |ldv_zalloc_#res.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume true; VAL [ldv_zalloc_~size=(_ bv1 32), ldv_zalloc_~tmp___0~1=(_ bv1 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv1 32), |ldv_zalloc_#res.base|=(_ bv0 32), |ldv_zalloc_#res.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] RET #1475#return; VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg2~0.base=(_ bv0 32), main_~ldvarg2~0.offset=(_ bv0 32), main_~ldvarg3~0.base=(_ bv0 32), main_~ldvarg3~0.offset=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~ldvarg5~0.base=(_ bv0 32), main_~ldvarg5~0.offset=(_ bv0 32), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp___2~5.base=(_ bv0 32), main_~tmp___2~5.offset=(_ bv0 32), main_~tmp___3~2.base=(_ bv0 32), main_~tmp___3~2.offset=(_ bv0 32), main_~tmp___4~3.base=(_ bv0 32), main_~tmp___4~3.offset=(_ bv0 32), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |main_#t~ret251.base|=(_ bv0 32), |main_#t~ret251.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~tmp___5~1.base, ~tmp___5~1.offset := #t~ret251.base, #t~ret251.offset;havoc #t~ret251.base, #t~ret251.offset;~ldvarg6~0.base, ~ldvarg6~0.offset := ~tmp___5~1.base, ~tmp___5~1.offset; VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg2~0.base=(_ bv0 32), main_~ldvarg2~0.offset=(_ bv0 32), main_~ldvarg3~0.base=(_ bv0 32), main_~ldvarg3~0.offset=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~ldvarg5~0.base=(_ bv0 32), main_~ldvarg5~0.offset=(_ bv0 32), main_~ldvarg6~0.base=(_ bv0 32), main_~ldvarg6~0.offset=(_ bv0 32), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp___2~5.base=(_ bv0 32), main_~tmp___2~5.offset=(_ bv0 32), main_~tmp___3~2.base=(_ bv0 32), main_~tmp___3~2.offset=(_ bv0 32), main_~tmp___4~3.base=(_ bv0 32), main_~tmp___4~3.offset=(_ bv0 32), main_~tmp___5~1.base=(_ bv0 32), main_~tmp___5~1.offset=(_ bv0 32), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call ldv_initialize(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call ldv_set_init(~LDV_SKBS~0.base, ~LDV_SKBS~0.offset); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_set_init_#in~set.base|=(_ bv0 32), |ldv_set_init_#in~set.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~set.base, ~set.offset := #in~set.base, #in~set.offset;~set.base, ~set.offset := ~#set_impl~0.base, ~#set_impl~0.offset;~last_index~0 := 0bv32; VAL [ldv_set_init_~set.base=(_ bv2147483717 32), ldv_set_init_~set.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_set_init_#in~set.base|=(_ bv0 32), |ldv_set_init_#in~set.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume true; VAL [ldv_set_init_~set.base=(_ bv2147483717 32), ldv_set_init_~set.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_set_init_#in~set.base|=(_ bv0 32), |ldv_set_init_#in~set.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] RET #1427#return; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume true; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] RET #1477#return; VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg2~0.base=(_ bv0 32), main_~ldvarg2~0.offset=(_ bv0 32), main_~ldvarg3~0.base=(_ bv0 32), main_~ldvarg3~0.offset=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~ldvarg5~0.base=(_ bv0 32), main_~ldvarg5~0.offset=(_ bv0 32), main_~ldvarg6~0.base=(_ bv0 32), main_~ldvarg6~0.offset=(_ bv0 32), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp___2~5.base=(_ bv0 32), main_~tmp___2~5.offset=(_ bv0 32), main_~tmp___3~2.base=(_ bv0 32), main_~tmp___3~2.offset=(_ bv0 32), main_~tmp___4~3.base=(_ bv0 32), main_~tmp___4~3.offset=(_ bv0 32), main_~tmp___5~1.base=(_ bv0 32), main_~tmp___5~1.offset=(_ bv0 32), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv0 32), ~ldv_state_variable_1~0=(_ bv0 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~ldv_state_variable_1~0 := 1bv32;~ref_cnt~0 := 0bv32;~ldv_state_variable_0~0 := 1bv32;~ldv_state_variable_3~0 := 0bv32;~ldv_state_variable_2~0 := 0bv32; VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg2~0.base=(_ bv0 32), main_~ldvarg2~0.offset=(_ bv0 32), main_~ldvarg3~0.base=(_ bv0 32), main_~ldvarg3~0.offset=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~ldvarg5~0.base=(_ bv0 32), main_~ldvarg5~0.offset=(_ bv0 32), main_~ldvarg6~0.base=(_ bv0 32), main_~ldvarg6~0.offset=(_ bv0 32), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp___2~5.base=(_ bv0 32), main_~tmp___2~5.offset=(_ bv0 32), main_~tmp___3~2.base=(_ bv0 32), main_~tmp___3~2.offset=(_ bv0 32), main_~tmp___4~3.base=(_ bv0 32), main_~tmp___4~3.offset=(_ bv0 32), main_~tmp___5~1.base=(_ bv0 32), main_~tmp___5~1.offset=(_ bv0 32), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv1 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~tmp___6~1 := #t~nondet252;havoc #t~nondet252;#t~switch253 := 0bv32 == ~tmp___6~1; VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg2~0.base=(_ bv0 32), main_~ldvarg2~0.offset=(_ bv0 32), main_~ldvarg3~0.base=(_ bv0 32), main_~ldvarg3~0.offset=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~ldvarg5~0.base=(_ bv0 32), main_~ldvarg5~0.offset=(_ bv0 32), main_~ldvarg6~0.base=(_ bv0 32), main_~ldvarg6~0.offset=(_ bv0 32), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp___2~5.base=(_ bv0 32), main_~tmp___2~5.offset=(_ bv0 32), main_~tmp___3~2.base=(_ bv0 32), main_~tmp___3~2.offset=(_ bv0 32), main_~tmp___4~3.base=(_ bv0 32), main_~tmp___4~3.offset=(_ bv0 32), main_~tmp___5~1.base=(_ bv0 32), main_~tmp___5~1.offset=(_ bv0 32), main_~tmp___6~1=(_ bv1 32), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |main_#t~switch253|=false, |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv1 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume !#t~switch253;#t~switch253 := #t~switch253 || 1bv32 == ~tmp___6~1; VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg2~0.base=(_ bv0 32), main_~ldvarg2~0.offset=(_ bv0 32), main_~ldvarg3~0.base=(_ bv0 32), main_~ldvarg3~0.offset=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~ldvarg5~0.base=(_ bv0 32), main_~ldvarg5~0.offset=(_ bv0 32), main_~ldvarg6~0.base=(_ bv0 32), main_~ldvarg6~0.offset=(_ bv0 32), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp___2~5.base=(_ bv0 32), main_~tmp___2~5.offset=(_ bv0 32), main_~tmp___3~2.base=(_ bv0 32), main_~tmp___3~2.offset=(_ bv0 32), main_~tmp___4~3.base=(_ bv0 32), main_~tmp___4~3.offset=(_ bv0 32), main_~tmp___5~1.base=(_ bv0 32), main_~tmp___5~1.offset=(_ bv0 32), main_~tmp___6~1=(_ bv1 32), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |main_#t~switch253|=true, |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv1 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume #t~switch253; VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg2~0.base=(_ bv0 32), main_~ldvarg2~0.offset=(_ bv0 32), main_~ldvarg3~0.base=(_ bv0 32), main_~ldvarg3~0.offset=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~ldvarg5~0.base=(_ bv0 32), main_~ldvarg5~0.offset=(_ bv0 32), main_~ldvarg6~0.base=(_ bv0 32), main_~ldvarg6~0.offset=(_ bv0 32), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp___2~5.base=(_ bv0 32), main_~tmp___2~5.offset=(_ bv0 32), main_~tmp___3~2.base=(_ bv0 32), main_~tmp___3~2.offset=(_ bv0 32), main_~tmp___4~3.base=(_ bv0 32), main_~tmp___4~3.offset=(_ bv0 32), main_~tmp___5~1.base=(_ bv0 32), main_~tmp___5~1.offset=(_ bv0 32), main_~tmp___6~1=(_ bv1 32), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |main_#t~switch253|=true, |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv1 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume 0bv32 != ~ldv_state_variable_0~0;~tmp___7~1 := #t~nondet254;havoc #t~nondet254;#t~switch255 := 0bv32 == ~tmp___7~1; VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg2~0.base=(_ bv0 32), main_~ldvarg2~0.offset=(_ bv0 32), main_~ldvarg3~0.base=(_ bv0 32), main_~ldvarg3~0.offset=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~ldvarg5~0.base=(_ bv0 32), main_~ldvarg5~0.offset=(_ bv0 32), main_~ldvarg6~0.base=(_ bv0 32), main_~ldvarg6~0.offset=(_ bv0 32), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp___2~5.base=(_ bv0 32), main_~tmp___2~5.offset=(_ bv0 32), main_~tmp___3~2.base=(_ bv0 32), main_~tmp___3~2.offset=(_ bv0 32), main_~tmp___4~3.base=(_ bv0 32), main_~tmp___4~3.offset=(_ bv0 32), main_~tmp___5~1.base=(_ bv0 32), main_~tmp___5~1.offset=(_ bv0 32), main_~tmp___6~1=(_ bv1 32), main_~tmp___7~1=(_ bv1 32), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |main_#t~switch253|=true, |main_#t~switch255|=false, |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv1 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume !#t~switch255;#t~switch255 := #t~switch255 || 1bv32 == ~tmp___7~1; VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg2~0.base=(_ bv0 32), main_~ldvarg2~0.offset=(_ bv0 32), main_~ldvarg3~0.base=(_ bv0 32), main_~ldvarg3~0.offset=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~ldvarg5~0.base=(_ bv0 32), main_~ldvarg5~0.offset=(_ bv0 32), main_~ldvarg6~0.base=(_ bv0 32), main_~ldvarg6~0.offset=(_ bv0 32), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp___2~5.base=(_ bv0 32), main_~tmp___2~5.offset=(_ bv0 32), main_~tmp___3~2.base=(_ bv0 32), main_~tmp___3~2.offset=(_ bv0 32), main_~tmp___4~3.base=(_ bv0 32), main_~tmp___4~3.offset=(_ bv0 32), main_~tmp___5~1.base=(_ bv0 32), main_~tmp___5~1.offset=(_ bv0 32), main_~tmp___6~1=(_ bv1 32), main_~tmp___7~1=(_ bv1 32), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |main_#t~switch253|=true, |main_#t~switch255|=true, |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv1 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume #t~switch255; VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg2~0.base=(_ bv0 32), main_~ldvarg2~0.offset=(_ bv0 32), main_~ldvarg3~0.base=(_ bv0 32), main_~ldvarg3~0.offset=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~ldvarg5~0.base=(_ bv0 32), main_~ldvarg5~0.offset=(_ bv0 32), main_~ldvarg6~0.base=(_ bv0 32), main_~ldvarg6~0.offset=(_ bv0 32), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp___2~5.base=(_ bv0 32), main_~tmp___2~5.offset=(_ bv0 32), main_~tmp___3~2.base=(_ bv0 32), main_~tmp___3~2.offset=(_ bv0 32), main_~tmp___4~3.base=(_ bv0 32), main_~tmp___4~3.offset=(_ bv0 32), main_~tmp___5~1.base=(_ bv0 32), main_~tmp___5~1.offset=(_ bv0 32), main_~tmp___6~1=(_ bv1 32), main_~tmp___7~1=(_ bv1 32), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |main_#t~switch253|=true, |main_#t~switch255|=true, |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv1 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume 1bv32 == ~ldv_state_variable_0~0; VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg2~0.base=(_ bv0 32), main_~ldvarg2~0.offset=(_ bv0 32), main_~ldvarg3~0.base=(_ bv0 32), main_~ldvarg3~0.offset=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~ldvarg5~0.base=(_ bv0 32), main_~ldvarg5~0.offset=(_ bv0 32), main_~ldvarg6~0.base=(_ bv0 32), main_~ldvarg6~0.offset=(_ bv0 32), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp___2~5.base=(_ bv0 32), main_~tmp___2~5.offset=(_ bv0 32), main_~tmp___3~2.base=(_ bv0 32), main_~tmp___3~2.offset=(_ bv0 32), main_~tmp___4~3.base=(_ bv0 32), main_~tmp___4~3.offset=(_ bv0 32), main_~tmp___5~1.base=(_ bv0 32), main_~tmp___5~1.offset=(_ bv0 32), main_~tmp___6~1=(_ bv1 32), main_~tmp___7~1=(_ bv1 32), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |main_#t~switch253|=true, |main_#t~switch255|=true, |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv1 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call #t~ret256 := mod_init(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv1 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call skb_queue_head_init(~#tx_queue~0.base, ~#tx_queue~0.offset); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |skb_queue_head_init_#in~list.base|=(_ bv2147745877 32), |skb_queue_head_init_#in~list.offset|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv1 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~list.base, ~list.offset := #in~list.base, #in~list.offset;call ~#__key~0.base, ~#__key~0.offset := #Ultimate.alloc(8bv32); VAL [skb_queue_head_init_~list.base=(_ bv2147745877 32), skb_queue_head_init_~list.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |skb_queue_head_init_#in~list.base|=(_ bv2147745877 32), |skb_queue_head_init_#in~list.offset|=(_ bv0 32), |skb_queue_head_init_~#__key~0.base|=(_ bv2818834517 32), |skb_queue_head_init_~#__key~0.offset|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv1 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call #t~ret21.base, #t~ret21.offset := spinlock_check(~list.base, ~bvadd32(20bv32, ~list.offset)); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |spinlock_check_#in~lock.base|=(_ bv2147745877 32), |spinlock_check_#in~lock.offset|=(_ bv20 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv1 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~lock.base, ~lock.offset := #in~lock.base, #in~lock.offset;#res.base, #res.offset := ~lock.base, ~lock.offset; VAL [spinlock_check_~lock.base=(_ bv2147745877 32), spinlock_check_~lock.offset=(_ bv20 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |spinlock_check_#in~lock.base|=(_ bv2147745877 32), |spinlock_check_#in~lock.offset|=(_ bv20 32), |spinlock_check_#res.base|=(_ bv2147745877 32), |spinlock_check_#res.offset|=(_ bv20 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv1 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume true; VAL [spinlock_check_~lock.base=(_ bv2147745877 32), spinlock_check_~lock.offset=(_ bv20 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |spinlock_check_#in~lock.base|=(_ bv2147745877 32), |spinlock_check_#in~lock.offset|=(_ bv20 32), |spinlock_check_#res.base|=(_ bv2147745877 32), |spinlock_check_#res.offset|=(_ bv20 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv1 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] RET #1431#return; VAL [skb_queue_head_init_~list.base=(_ bv2147745877 32), skb_queue_head_init_~list.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |skb_queue_head_init_#in~list.base|=(_ bv2147745877 32), |skb_queue_head_init_#in~list.offset|=(_ bv0 32), |skb_queue_head_init_#t~ret21.base|=(_ bv2147745877 32), |skb_queue_head_init_#t~ret21.offset|=(_ bv20 32), |skb_queue_head_init_~#__key~0.base|=(_ bv2818834517 32), |skb_queue_head_init_~#__key~0.offset|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv1 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] havoc #t~ret21.base, #t~ret21.offset;call __raw_spin_lock_init(~list.base, ~bvadd32(20bv32, ~list.offset), #t~string22.base, #t~string22.offset, ~#__key~0.base, ~#__key~0.offset); VAL [skb_queue_head_init_~list.base=(_ bv2147745877 32), skb_queue_head_init_~list.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |skb_queue_head_init_#in~list.base|=(_ bv2147745877 32), |skb_queue_head_init_#in~list.offset|=(_ bv0 32), |skb_queue_head_init_~#__key~0.base|=(_ bv2818834517 32), |skb_queue_head_init_~#__key~0.offset|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv1 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call __skb_queue_head_init(~list.base, ~list.offset); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |__skb_queue_head_init_#in~list.base|=(_ bv2147745877 32), |__skb_queue_head_init_#in~list.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv1 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~list.base, ~list.offset := #in~list.base, #in~list.offset;havoc ~tmp~0.base, ~tmp~0.offset;~tmp~0.base, ~tmp~0.offset := ~list.base, ~list.offset;call write~$Pointer$(~tmp~0.base, ~tmp~0.offset, ~list.base, ~list.offset, 8bv32);call write~$Pointer$(~tmp~0.base, ~tmp~0.offset, ~list.base, ~bvadd32(8bv32, ~list.offset), 8bv32);call write~intINTTYPE4(0bv32, ~list.base, ~bvadd32(16bv32, ~list.offset), 4bv32); VAL [__skb_queue_head_init_~list.base=(_ bv2147745877 32), __skb_queue_head_init_~list.offset=(_ bv0 32), __skb_queue_head_init_~tmp~0.base=(_ bv2147745877 32), __skb_queue_head_init_~tmp~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |__skb_queue_head_init_#in~list.base|=(_ bv2147745877 32), |__skb_queue_head_init_#in~list.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv1 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume true; VAL [__skb_queue_head_init_~list.base=(_ bv2147745877 32), __skb_queue_head_init_~list.offset=(_ bv0 32), __skb_queue_head_init_~tmp~0.base=(_ bv2147745877 32), __skb_queue_head_init_~tmp~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |__skb_queue_head_init_#in~list.base|=(_ bv2147745877 32), |__skb_queue_head_init_#in~list.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv1 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] RET #1433#return; VAL [skb_queue_head_init_~list.base=(_ bv2147745877 32), skb_queue_head_init_~list.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |skb_queue_head_init_#in~list.base|=(_ bv2147745877 32), |skb_queue_head_init_#in~list.offset|=(_ bv0 32), |skb_queue_head_init_~#__key~0.base|=(_ bv2818834517 32), |skb_queue_head_init_~#__key~0.offset|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv1 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] call ULTIMATE.dealloc(~#__key~0.base, ~#__key~0.offset);havoc ~#__key~0.base, ~#__key~0.offset; VAL [skb_queue_head_init_~list.base=(_ bv2147745877 32), skb_queue_head_init_~list.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |skb_queue_head_init_#in~list.base|=(_ bv2147745877 32), |skb_queue_head_init_#in~list.offset|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv1 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume true; VAL [skb_queue_head_init_~list.base=(_ bv2147745877 32), skb_queue_head_init_~list.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |skb_queue_head_init_#in~list.base|=(_ bv2147745877 32), |skb_queue_head_init_#in~list.offset|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv1 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] RET #1641#return; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv1 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] call register_hdlc_protocol(~#proto~0.base, ~#proto~0.offset);#res := 0bv32; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |mod_init_#res|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv1 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume true; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |mod_init_#res|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv1 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] RET #1483#return; VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg2~0.base=(_ bv0 32), main_~ldvarg2~0.offset=(_ bv0 32), main_~ldvarg3~0.base=(_ bv0 32), main_~ldvarg3~0.offset=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~ldvarg5~0.base=(_ bv0 32), main_~ldvarg5~0.offset=(_ bv0 32), main_~ldvarg6~0.base=(_ bv0 32), main_~ldvarg6~0.offset=(_ bv0 32), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp___2~5.base=(_ bv0 32), main_~tmp___2~5.offset=(_ bv0 32), main_~tmp___3~2.base=(_ bv0 32), main_~tmp___3~2.offset=(_ bv0 32), main_~tmp___4~3.base=(_ bv0 32), main_~tmp___4~3.offset=(_ bv0 32), main_~tmp___5~1.base=(_ bv0 32), main_~tmp___5~1.offset=(_ bv0 32), main_~tmp___6~1=(_ bv1 32), main_~tmp___7~1=(_ bv1 32), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |main_#t~ret256|=(_ bv0 32), |main_#t~switch253|=true, |main_#t~switch255|=true, |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv1 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~ldv_retval_0~0 := #t~ret256;havoc #t~ret256; VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg2~0.base=(_ bv0 32), main_~ldvarg2~0.offset=(_ bv0 32), main_~ldvarg3~0.base=(_ bv0 32), main_~ldvarg3~0.offset=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~ldvarg5~0.base=(_ bv0 32), main_~ldvarg5~0.offset=(_ bv0 32), main_~ldvarg6~0.base=(_ bv0 32), main_~ldvarg6~0.offset=(_ bv0 32), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp___2~5.base=(_ bv0 32), main_~tmp___2~5.offset=(_ bv0 32), main_~tmp___3~2.base=(_ bv0 32), main_~tmp___3~2.offset=(_ bv0 32), main_~tmp___4~3.base=(_ bv0 32), main_~tmp___4~3.offset=(_ bv0 32), main_~tmp___5~1.base=(_ bv0 32), main_~tmp___5~1.offset=(_ bv0 32), main_~tmp___6~1=(_ bv1 32), main_~tmp___7~1=(_ bv1 32), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |main_#t~switch253|=true, |main_#t~switch255|=true, |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv1 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv0 32), ~ldv_state_variable_3~0=(_ bv0 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume 0bv32 == ~ldv_retval_0~0;~ldv_state_variable_0~0 := 3bv32;~ldv_state_variable_2~0 := 1bv32;~ldv_state_variable_3~0 := 1bv32; VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg2~0.base=(_ bv0 32), main_~ldvarg2~0.offset=(_ bv0 32), main_~ldvarg3~0.base=(_ bv0 32), main_~ldvarg3~0.offset=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~ldvarg5~0.base=(_ bv0 32), main_~ldvarg5~0.offset=(_ bv0 32), main_~ldvarg6~0.base=(_ bv0 32), main_~ldvarg6~0.offset=(_ bv0 32), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp___2~5.base=(_ bv0 32), main_~tmp___2~5.offset=(_ bv0 32), main_~tmp___3~2.base=(_ bv0 32), main_~tmp___3~2.offset=(_ bv0 32), main_~tmp___4~3.base=(_ bv0 32), main_~tmp___4~3.offset=(_ bv0 32), main_~tmp___5~1.base=(_ bv0 32), main_~tmp___5~1.offset=(_ bv0 32), main_~tmp___6~1=(_ bv1 32), main_~tmp___7~1=(_ bv1 32), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |main_#t~switch253|=true, |main_#t~switch255|=true, |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call ldv_initialize_hdlc_proto_3(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] havoc ~tmp~19.base, ~tmp~19.offset;havoc ~tmp___0~8.base, ~tmp___0~8.offset; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call #t~ret239.base, #t~ret239.offset := ldv_zalloc(3264bv32); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv3264 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~size := #in~size;havoc ~p~1.base, ~p~1.offset;havoc ~tmp~2.base, ~tmp~2.offset;havoc ~tmp___0~1;~tmp___0~1 := #t~nondet38;havoc #t~nondet38; VAL [ldv_zalloc_~size=(_ bv3264 32), ldv_zalloc_~tmp___0~1=(_ bv1 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv3264 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume 0bv32 != ~tmp___0~1;#res.base, #res.offset := 0bv32, 0bv32; VAL [ldv_zalloc_~size=(_ bv3264 32), ldv_zalloc_~tmp___0~1=(_ bv1 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv3264 32), |ldv_zalloc_#res.base|=(_ bv0 32), |ldv_zalloc_#res.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume true; VAL [ldv_zalloc_~size=(_ bv3264 32), ldv_zalloc_~tmp___0~1=(_ bv1 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv3264 32), |ldv_zalloc_#res.base|=(_ bv0 32), |ldv_zalloc_#res.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] RET #1619#return; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_initialize_hdlc_proto_3_#t~ret239.base|=(_ bv0 32), |ldv_initialize_hdlc_proto_3_#t~ret239.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~tmp~19.base, ~tmp~19.offset := #t~ret239.base, #t~ret239.offset;havoc #t~ret239.base, #t~ret239.offset;~proto_group1~0.base, ~proto_group1~0.offset := ~tmp~19.base, ~tmp~19.offset; VAL [ldv_initialize_hdlc_proto_3_~tmp~19.base=(_ bv0 32), ldv_initialize_hdlc_proto_3_~tmp~19.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call #t~ret240.base, #t~ret240.offset := ldv_zalloc(232bv32); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv232 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~size := #in~size;havoc ~p~1.base, ~p~1.offset;havoc ~tmp~2.base, ~tmp~2.offset;havoc ~tmp___0~1;~tmp___0~1 := #t~nondet38;havoc #t~nondet38; VAL [ldv_zalloc_~size=(_ bv232 32), ldv_zalloc_~tmp___0~1=(_ bv1 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv232 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume 0bv32 != ~tmp___0~1;#res.base, #res.offset := 0bv32, 0bv32; VAL [ldv_zalloc_~size=(_ bv232 32), ldv_zalloc_~tmp___0~1=(_ bv1 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv232 32), |ldv_zalloc_#res.base|=(_ bv0 32), |ldv_zalloc_#res.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume true; VAL [ldv_zalloc_~size=(_ bv232 32), ldv_zalloc_~tmp___0~1=(_ bv1 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv232 32), |ldv_zalloc_#res.base|=(_ bv0 32), |ldv_zalloc_#res.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] RET #1621#return; VAL [ldv_initialize_hdlc_proto_3_~tmp~19.base=(_ bv0 32), ldv_initialize_hdlc_proto_3_~tmp~19.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_initialize_hdlc_proto_3_#t~ret240.base|=(_ bv0 32), |ldv_initialize_hdlc_proto_3_#t~ret240.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~tmp___0~8.base, ~tmp___0~8.offset := #t~ret240.base, #t~ret240.offset;havoc #t~ret240.base, #t~ret240.offset;~proto_group0~0.base, ~proto_group0~0.offset := ~tmp___0~8.base, ~tmp___0~8.offset; VAL [ldv_initialize_hdlc_proto_3_~tmp___0~8.base=(_ bv0 32), ldv_initialize_hdlc_proto_3_~tmp___0~8.offset=(_ bv0 32), ldv_initialize_hdlc_proto_3_~tmp~19.base=(_ bv0 32), ldv_initialize_hdlc_proto_3_~tmp~19.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume true; VAL [ldv_initialize_hdlc_proto_3_~tmp___0~8.base=(_ bv0 32), ldv_initialize_hdlc_proto_3_~tmp___0~8.offset=(_ bv0 32), ldv_initialize_hdlc_proto_3_~tmp~19.base=(_ bv0 32), ldv_initialize_hdlc_proto_3_~tmp~19.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] RET #1485#return; VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg2~0.base=(_ bv0 32), main_~ldvarg2~0.offset=(_ bv0 32), main_~ldvarg3~0.base=(_ bv0 32), main_~ldvarg3~0.offset=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~ldvarg5~0.base=(_ bv0 32), main_~ldvarg5~0.offset=(_ bv0 32), main_~ldvarg6~0.base=(_ bv0 32), main_~ldvarg6~0.offset=(_ bv0 32), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp___2~5.base=(_ bv0 32), main_~tmp___2~5.offset=(_ bv0 32), main_~tmp___3~2.base=(_ bv0 32), main_~tmp___3~2.offset=(_ bv0 32), main_~tmp___4~3.base=(_ bv0 32), main_~tmp___4~3.offset=(_ bv0 32), main_~tmp___5~1.base=(_ bv0 32), main_~tmp___5~1.offset=(_ bv0 32), main_~tmp___6~1=(_ bv1 32), main_~tmp___7~1=(_ bv1 32), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |main_#t~switch253|=true, |main_#t~switch255|=true, |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume !(0bv32 != ~ldv_retval_0~0); VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg2~0.base=(_ bv0 32), main_~ldvarg2~0.offset=(_ bv0 32), main_~ldvarg3~0.base=(_ bv0 32), main_~ldvarg3~0.offset=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~ldvarg5~0.base=(_ bv0 32), main_~ldvarg5~0.offset=(_ bv0 32), main_~ldvarg6~0.base=(_ bv0 32), main_~ldvarg6~0.offset=(_ bv0 32), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp___2~5.base=(_ bv0 32), main_~tmp___2~5.offset=(_ bv0 32), main_~tmp___3~2.base=(_ bv0 32), main_~tmp___3~2.offset=(_ bv0 32), main_~tmp___4~3.base=(_ bv0 32), main_~tmp___4~3.offset=(_ bv0 32), main_~tmp___5~1.base=(_ bv0 32), main_~tmp___5~1.offset=(_ bv0 32), main_~tmp___6~1=(_ bv1 32), main_~tmp___7~1=(_ bv1 32), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |main_#t~switch253|=true, |main_#t~switch255|=true, |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~tmp___6~1 := #t~nondet252;havoc #t~nondet252;#t~switch253 := 0bv32 == ~tmp___6~1; VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg2~0.base=(_ bv0 32), main_~ldvarg2~0.offset=(_ bv0 32), main_~ldvarg3~0.base=(_ bv0 32), main_~ldvarg3~0.offset=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~ldvarg5~0.base=(_ bv0 32), main_~ldvarg5~0.offset=(_ bv0 32), main_~ldvarg6~0.base=(_ bv0 32), main_~ldvarg6~0.offset=(_ bv0 32), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp___2~5.base=(_ bv0 32), main_~tmp___2~5.offset=(_ bv0 32), main_~tmp___3~2.base=(_ bv0 32), main_~tmp___3~2.offset=(_ bv0 32), main_~tmp___4~3.base=(_ bv0 32), main_~tmp___4~3.offset=(_ bv0 32), main_~tmp___5~1.base=(_ bv0 32), main_~tmp___5~1.offset=(_ bv0 32), main_~tmp___6~1=(_ bv0 32), main_~tmp___7~1=(_ bv1 32), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |main_#t~switch253|=true, |main_#t~switch255|=true, |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume #t~switch253; VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg2~0.base=(_ bv0 32), main_~ldvarg2~0.offset=(_ bv0 32), main_~ldvarg3~0.base=(_ bv0 32), main_~ldvarg3~0.offset=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~ldvarg5~0.base=(_ bv0 32), main_~ldvarg5~0.offset=(_ bv0 32), main_~ldvarg6~0.base=(_ bv0 32), main_~ldvarg6~0.offset=(_ bv0 32), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp___2~5.base=(_ bv0 32), main_~tmp___2~5.offset=(_ bv0 32), main_~tmp___3~2.base=(_ bv0 32), main_~tmp___3~2.offset=(_ bv0 32), main_~tmp___4~3.base=(_ bv0 32), main_~tmp___4~3.offset=(_ bv0 32), main_~tmp___5~1.base=(_ bv0 32), main_~tmp___5~1.offset=(_ bv0 32), main_~tmp___6~1=(_ bv0 32), main_~tmp___7~1=(_ bv1 32), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |main_#t~switch253|=true, |main_#t~switch255|=true, |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume 0bv32 != ~ldv_state_variable_1~0; VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg2~0.base=(_ bv0 32), main_~ldvarg2~0.offset=(_ bv0 32), main_~ldvarg3~0.base=(_ bv0 32), main_~ldvarg3~0.offset=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~ldvarg5~0.base=(_ bv0 32), main_~ldvarg5~0.offset=(_ bv0 32), main_~ldvarg6~0.base=(_ bv0 32), main_~ldvarg6~0.offset=(_ bv0 32), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp___2~5.base=(_ bv0 32), main_~tmp___2~5.offset=(_ bv0 32), main_~tmp___3~2.base=(_ bv0 32), main_~tmp___3~2.offset=(_ bv0 32), main_~tmp___4~3.base=(_ bv0 32), main_~tmp___4~3.offset=(_ bv0 32), main_~tmp___5~1.base=(_ bv0 32), main_~tmp___5~1.offset=(_ bv0 32), main_~tmp___6~1=(_ bv0 32), main_~tmp___7~1=(_ bv1 32), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |main_#t~switch253|=true, |main_#t~switch255|=true, |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call choose_timer_1(~ldv_timer_list_1~0.base, ~ldv_timer_list_1~0.offset); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |choose_timer_1_#in~timer.base|=(_ bv0 32), |choose_timer_1_#in~timer.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~timer.base, ~timer.offset := #in~timer.base, #in~timer.offset;~LDV_IN_INTERRUPT~0 := 2bv32;call #t~mem243 := read~intINTTYPE8(~timer.base, ~bvadd32(40bv32, ~timer.offset), 8bv32);call #t~mem244.base, #t~mem244.offset := read~$Pointer$(~timer.base, ~bvadd32(32bv32, ~timer.offset), 8bv32); VAL [choose_timer_1_~timer.base=(_ bv0 32), choose_timer_1_~timer.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |choose_timer_1_#in~timer.base|=(_ bv0 32), |choose_timer_1_#in~timer.offset|=(_ bv0 32), |choose_timer_1_#t~mem243|=(_ bv0 64), |choose_timer_1_#t~mem244.base|=(_ bv0 32), |choose_timer_1_#t~mem244.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call ##fun~C_ULONG~TO~VOID(#t~mem243, #t~mem244.base, #t~mem244.offset); VAL [|##fun~C_ULONG~TO~VOID_#in~#fp.base|=(_ bv0 32), |##fun~C_ULONG~TO~VOID_#in~#fp.offset|=(_ bv0 32), |##fun~C_ULONG~TO~VOID_#in~242|=(_ bv0 64), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] #~242 := #in~242; VAL [|##fun~C_ULONG~TO~VOID_#in~#fp.base|=(_ bv0 32), |##fun~C_ULONG~TO~VOID_#in~#fp.offset|=(_ bv0 32), |##fun~C_ULONG~TO~VOID_#in~242|=(_ bv0 64), |##fun~C_ULONG~TO~VOID_#~242|=(_ bv0 64), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call ppp_timer(#~242); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |ppp_timer_#in~arg|=(_ bv0 64), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~arg := #in~arg;havoc ~proto___0~2.base, ~proto___0~2.offset;havoc ~ppp~3.base, ~ppp~3.offset;havoc ~tmp~16.base, ~tmp~16.offset;havoc ~flags~1;havoc ~tmp___0~6.base, ~tmp___0~6.offset;~proto___0~2.base, ~proto___0~2.offset := 0bv32, ~arg[32:0];call #t~mem194.base, #t~mem194.offset := read~$Pointer$(~proto___0~2.base, ~proto___0~2.offset, 8bv32); VAL [ppp_timer_~arg=(_ bv0 64), ppp_timer_~proto___0~2.base=(_ bv0 32), ppp_timer_~proto___0~2.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |ppp_timer_#in~arg|=(_ bv0 64), |ppp_timer_#t~mem194.base|=(_ bv2147745877 32), |ppp_timer_#t~mem194.offset|=(_ bv4294963932 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call #t~ret195.base, #t~ret195.offset := get_ppp(#t~mem194.base, #t~mem194.offset); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |get_ppp_#in~dev.base|=(_ bv2147745877 32), |get_ppp_#in~dev.offset|=(_ bv4294963932 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset;havoc ~tmp~9.base, ~tmp~9.offset; VAL [get_ppp_~dev.base=(_ bv2147745877 32), get_ppp_~dev.offset=(_ bv4294963932 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |get_ppp_#in~dev.base|=(_ bv2147745877 32), |get_ppp_#in~dev.offset|=(_ bv4294963932 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call #t~ret59.base, #t~ret59.offset := dev_to_hdlc(~dev.base, ~dev.offset); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |dev_to_hdlc_#in~dev.base|=(_ bv2147745877 32), |dev_to_hdlc_#in~dev.offset|=(_ bv4294963932 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset;havoc ~tmp~8.base, ~tmp~8.offset; VAL [dev_to_hdlc_~dev.base=(_ bv2147745877 32), dev_to_hdlc_~dev.offset=(_ bv4294963932 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |dev_to_hdlc_#in~dev.base|=(_ bv2147745877 32), |dev_to_hdlc_#in~dev.offset|=(_ bv4294963932 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call #t~ret55.base, #t~ret55.offset := netdev_priv(~dev.base, ~dev.offset); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |netdev_priv_#in~dev.base|=(_ bv2147745877 32), |netdev_priv_#in~dev.offset|=(_ bv4294963932 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset;#res.base, #res.offset := ~dev.base, ~bvadd32(3264bv32, ~dev.offset); VAL [netdev_priv_~dev.base=(_ bv2147745877 32), netdev_priv_~dev.offset=(_ bv4294963932 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |netdev_priv_#in~dev.base|=(_ bv2147745877 32), |netdev_priv_#in~dev.offset|=(_ bv4294963932 32), |netdev_priv_#res.base|=(_ bv2147745877 32), |netdev_priv_#res.offset|=(_ bv4294967196 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume true; VAL [netdev_priv_~dev.base=(_ bv2147745877 32), netdev_priv_~dev.offset=(_ bv4294963932 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |netdev_priv_#in~dev.base|=(_ bv2147745877 32), |netdev_priv_#in~dev.offset|=(_ bv4294963932 32), |netdev_priv_#res.base|=(_ bv2147745877 32), |netdev_priv_#res.offset|=(_ bv4294967196 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] RET #1435#return; VAL [dev_to_hdlc_~dev.base=(_ bv2147745877 32), dev_to_hdlc_~dev.offset=(_ bv4294963932 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |dev_to_hdlc_#in~dev.base|=(_ bv2147745877 32), |dev_to_hdlc_#in~dev.offset|=(_ bv4294963932 32), |dev_to_hdlc_#t~ret55.base|=(_ bv2147745877 32), |dev_to_hdlc_#t~ret55.offset|=(_ bv4294967196 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~tmp~8.base, ~tmp~8.offset := #t~ret55.base, #t~ret55.offset;havoc #t~ret55.base, #t~ret55.offset;#res.base, #res.offset := ~tmp~8.base, ~tmp~8.offset; VAL [dev_to_hdlc_~dev.base=(_ bv2147745877 32), dev_to_hdlc_~dev.offset=(_ bv4294963932 32), dev_to_hdlc_~tmp~8.base=(_ bv2147745877 32), dev_to_hdlc_~tmp~8.offset=(_ bv4294967196 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |dev_to_hdlc_#in~dev.base|=(_ bv2147745877 32), |dev_to_hdlc_#in~dev.offset|=(_ bv4294963932 32), |dev_to_hdlc_#res.base|=(_ bv2147745877 32), |dev_to_hdlc_#res.offset|=(_ bv4294967196 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume true; VAL [dev_to_hdlc_~dev.base=(_ bv2147745877 32), dev_to_hdlc_~dev.offset=(_ bv4294963932 32), dev_to_hdlc_~tmp~8.base=(_ bv2147745877 32), dev_to_hdlc_~tmp~8.offset=(_ bv4294967196 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |dev_to_hdlc_#in~dev.base|=(_ bv2147745877 32), |dev_to_hdlc_#in~dev.offset|=(_ bv4294963932 32), |dev_to_hdlc_#res.base|=(_ bv2147745877 32), |dev_to_hdlc_#res.offset|=(_ bv4294967196 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] RET #1535#return; VAL [get_ppp_~dev.base=(_ bv2147745877 32), get_ppp_~dev.offset=(_ bv4294963932 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |get_ppp_#in~dev.base|=(_ bv2147745877 32), |get_ppp_#in~dev.offset|=(_ bv4294963932 32), |get_ppp_#t~ret59.base|=(_ bv2147745877 32), |get_ppp_#t~ret59.offset|=(_ bv4294967196 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~tmp~9.base, ~tmp~9.offset := #t~ret59.base, #t~ret59.offset;havoc #t~ret59.base, #t~ret59.offset;call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~tmp~9.base, ~bvadd32(100bv32, ~tmp~9.offset), 8bv32);#res.base, #res.offset := #t~mem60.base, #t~mem60.offset;havoc #t~mem60.base, #t~mem60.offset; VAL [get_ppp_~dev.base=(_ bv2147745877 32), get_ppp_~dev.offset=(_ bv4294963932 32), get_ppp_~tmp~9.base=(_ bv2147745877 32), get_ppp_~tmp~9.offset=(_ bv4294967196 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |get_ppp_#in~dev.base|=(_ bv2147745877 32), |get_ppp_#in~dev.offset|=(_ bv4294963932 32), |get_ppp_#res.base|=(_ bv2147745877 32), |get_ppp_#res.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume true; VAL [get_ppp_~dev.base=(_ bv2147745877 32), get_ppp_~dev.offset=(_ bv4294963932 32), get_ppp_~tmp~9.base=(_ bv2147745877 32), get_ppp_~tmp~9.offset=(_ bv4294967196 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |get_ppp_#in~dev.base|=(_ bv2147745877 32), |get_ppp_#in~dev.offset|=(_ bv4294963932 32), |get_ppp_#res.base|=(_ bv2147745877 32), |get_ppp_#res.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] RET #1447#return; VAL [ppp_timer_~arg=(_ bv0 64), ppp_timer_~proto___0~2.base=(_ bv0 32), ppp_timer_~proto___0~2.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |ppp_timer_#in~arg|=(_ bv0 64), |ppp_timer_#t~mem194.base|=(_ bv2147745877 32), |ppp_timer_#t~mem194.offset|=(_ bv4294963932 32), |ppp_timer_#t~ret195.base|=(_ bv2147745877 32), |ppp_timer_#t~ret195.offset|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~tmp~16.base, ~tmp~16.offset := #t~ret195.base, #t~ret195.offset;havoc #t~mem194.base, #t~mem194.offset;havoc #t~ret195.base, #t~ret195.offset;~ppp~3.base, ~ppp~3.offset := ~tmp~16.base, ~tmp~16.offset; VAL [ppp_timer_~arg=(_ bv0 64), ppp_timer_~ppp~3.base=(_ bv2147745877 32), ppp_timer_~ppp~3.offset=(_ bv0 32), ppp_timer_~proto___0~2.base=(_ bv0 32), ppp_timer_~proto___0~2.offset=(_ bv0 32), ppp_timer_~tmp~16.base=(_ bv2147745877 32), ppp_timer_~tmp~16.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |ppp_timer_#in~arg|=(_ bv0 64), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call #t~ret196.base, #t~ret196.offset := spinlock_check(~ppp~3.base, ~bvadd32(435bv32, ~ppp~3.offset)); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |spinlock_check_#in~lock.base|=(_ bv2147745877 32), |spinlock_check_#in~lock.offset|=(_ bv435 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~lock.base, ~lock.offset := #in~lock.base, #in~lock.offset;#res.base, #res.offset := ~lock.base, ~lock.offset; VAL [spinlock_check_~lock.base=(_ bv2147745877 32), spinlock_check_~lock.offset=(_ bv435 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |spinlock_check_#in~lock.base|=(_ bv2147745877 32), |spinlock_check_#in~lock.offset|=(_ bv435 32), |spinlock_check_#res.base|=(_ bv2147745877 32), |spinlock_check_#res.offset|=(_ bv435 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume true; VAL [spinlock_check_~lock.base=(_ bv2147745877 32), spinlock_check_~lock.offset=(_ bv435 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |spinlock_check_#in~lock.base|=(_ bv2147745877 32), |spinlock_check_#in~lock.offset|=(_ bv435 32), |spinlock_check_#res.base|=(_ bv2147745877 32), |spinlock_check_#res.offset|=(_ bv435 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] RET #1449#return; VAL [ppp_timer_~arg=(_ bv0 64), ppp_timer_~ppp~3.base=(_ bv2147745877 32), ppp_timer_~ppp~3.offset=(_ bv0 32), ppp_timer_~proto___0~2.base=(_ bv0 32), ppp_timer_~proto___0~2.offset=(_ bv0 32), ppp_timer_~tmp~16.base=(_ bv2147745877 32), ppp_timer_~tmp~16.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |ppp_timer_#in~arg|=(_ bv0 64), |ppp_timer_#t~ret196.base|=(_ bv2147745877 32), |ppp_timer_#t~ret196.offset|=(_ bv435 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~tmp___0~6.base, ~tmp___0~6.offset := #t~ret196.base, #t~ret196.offset;havoc #t~ret196.base, #t~ret196.offset;call #t~ret197 := _raw_spin_lock_irqsave(~tmp___0~6.base, ~tmp___0~6.offset);~flags~1 := #t~ret197;havoc #t~ret197;call #t~mem198 := read~intINTTYPE1(~proto___0~2.base, ~bvadd32(142bv32, ~proto___0~2.offset), 1bv32);#t~switch199 := 2bv32 == ~zero_extendFrom8To32(#t~mem198); VAL [ppp_timer_~arg=(_ bv0 64), ppp_timer_~ppp~3.base=(_ bv2147745877 32), ppp_timer_~ppp~3.offset=(_ bv0 32), ppp_timer_~proto___0~2.base=(_ bv0 32), ppp_timer_~proto___0~2.offset=(_ bv0 32), ppp_timer_~tmp___0~6.base=(_ bv2147745877 32), ppp_timer_~tmp___0~6.offset=(_ bv435 32), ppp_timer_~tmp~16.base=(_ bv2147745877 32), ppp_timer_~tmp~16.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |ppp_timer_#in~arg|=(_ bv0 64), |ppp_timer_#t~mem198|=(_ bv6 8), |ppp_timer_#t~switch199|=false, |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume !#t~switch199; VAL [ppp_timer_~arg=(_ bv0 64), ppp_timer_~ppp~3.base=(_ bv2147745877 32), ppp_timer_~ppp~3.offset=(_ bv0 32), ppp_timer_~proto___0~2.base=(_ bv0 32), ppp_timer_~proto___0~2.offset=(_ bv0 32), ppp_timer_~tmp___0~6.base=(_ bv2147745877 32), ppp_timer_~tmp___0~6.offset=(_ bv435 32), ppp_timer_~tmp~16.base=(_ bv2147745877 32), ppp_timer_~tmp~16.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |ppp_timer_#in~arg|=(_ bv0 64), |ppp_timer_#t~mem198|=(_ bv6 8), |ppp_timer_#t~switch199|=false, |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] #t~switch199 := #t~switch199 || 3bv32 == ~zero_extendFrom8To32(#t~mem198); VAL [ppp_timer_~arg=(_ bv0 64), ppp_timer_~ppp~3.base=(_ bv2147745877 32), ppp_timer_~ppp~3.offset=(_ bv0 32), ppp_timer_~proto___0~2.base=(_ bv0 32), ppp_timer_~proto___0~2.offset=(_ bv0 32), ppp_timer_~tmp___0~6.base=(_ bv2147745877 32), ppp_timer_~tmp___0~6.offset=(_ bv435 32), ppp_timer_~tmp~16.base=(_ bv2147745877 32), ppp_timer_~tmp~16.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |ppp_timer_#in~arg|=(_ bv0 64), |ppp_timer_#t~mem198|=(_ bv6 8), |ppp_timer_#t~switch199|=false, |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume !#t~switch199; VAL [ppp_timer_~arg=(_ bv0 64), ppp_timer_~ppp~3.base=(_ bv2147745877 32), ppp_timer_~ppp~3.offset=(_ bv0 32), ppp_timer_~proto___0~2.base=(_ bv0 32), ppp_timer_~proto___0~2.offset=(_ bv0 32), ppp_timer_~tmp___0~6.base=(_ bv2147745877 32), ppp_timer_~tmp___0~6.offset=(_ bv435 32), ppp_timer_~tmp~16.base=(_ bv2147745877 32), ppp_timer_~tmp~16.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |ppp_timer_#in~arg|=(_ bv0 64), |ppp_timer_#t~mem198|=(_ bv6 8), |ppp_timer_#t~switch199|=false, |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] #t~switch199 := #t~switch199 || 4bv32 == ~zero_extendFrom8To32(#t~mem198); VAL [ppp_timer_~arg=(_ bv0 64), ppp_timer_~ppp~3.base=(_ bv2147745877 32), ppp_timer_~ppp~3.offset=(_ bv0 32), ppp_timer_~proto___0~2.base=(_ bv0 32), ppp_timer_~proto___0~2.offset=(_ bv0 32), ppp_timer_~tmp___0~6.base=(_ bv2147745877 32), ppp_timer_~tmp___0~6.offset=(_ bv435 32), ppp_timer_~tmp~16.base=(_ bv2147745877 32), ppp_timer_~tmp~16.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |ppp_timer_#in~arg|=(_ bv0 64), |ppp_timer_#t~mem198|=(_ bv6 8), |ppp_timer_#t~switch199|=false, |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume !#t~switch199; VAL [ppp_timer_~arg=(_ bv0 64), ppp_timer_~ppp~3.base=(_ bv2147745877 32), ppp_timer_~ppp~3.offset=(_ bv0 32), ppp_timer_~proto___0~2.base=(_ bv0 32), ppp_timer_~proto___0~2.offset=(_ bv0 32), ppp_timer_~tmp___0~6.base=(_ bv2147745877 32), ppp_timer_~tmp___0~6.offset=(_ bv435 32), ppp_timer_~tmp~16.base=(_ bv2147745877 32), ppp_timer_~tmp~16.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |ppp_timer_#in~arg|=(_ bv0 64), |ppp_timer_#t~mem198|=(_ bv6 8), |ppp_timer_#t~switch199|=false, |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] #t~switch199 := #t~switch199 || 5bv32 == ~zero_extendFrom8To32(#t~mem198); VAL [ppp_timer_~arg=(_ bv0 64), ppp_timer_~ppp~3.base=(_ bv2147745877 32), ppp_timer_~ppp~3.offset=(_ bv0 32), ppp_timer_~proto___0~2.base=(_ bv0 32), ppp_timer_~proto___0~2.offset=(_ bv0 32), ppp_timer_~tmp___0~6.base=(_ bv2147745877 32), ppp_timer_~tmp___0~6.offset=(_ bv435 32), ppp_timer_~tmp~16.base=(_ bv2147745877 32), ppp_timer_~tmp~16.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |ppp_timer_#in~arg|=(_ bv0 64), |ppp_timer_#t~mem198|=(_ bv6 8), |ppp_timer_#t~switch199|=false, |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume !#t~switch199;#t~switch199 := #t~switch199 || 6bv32 == ~zero_extendFrom8To32(#t~mem198); VAL [ppp_timer_~arg=(_ bv0 64), ppp_timer_~ppp~3.base=(_ bv2147745877 32), ppp_timer_~ppp~3.offset=(_ bv0 32), ppp_timer_~proto___0~2.base=(_ bv0 32), ppp_timer_~proto___0~2.offset=(_ bv0 32), ppp_timer_~tmp___0~6.base=(_ bv2147745877 32), ppp_timer_~tmp___0~6.offset=(_ bv435 32), ppp_timer_~tmp~16.base=(_ bv2147745877 32), ppp_timer_~tmp~16.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |ppp_timer_#in~arg|=(_ bv0 64), |ppp_timer_#t~mem198|=(_ bv6 8), |ppp_timer_#t~switch199|=true, |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume #t~switch199;call #t~mem206 := read~intINTTYPE2(~proto___0~2.base, ~bvadd32(140bv32, ~proto___0~2.offset), 2bv32); VAL [ppp_timer_~arg=(_ bv0 64), ppp_timer_~ppp~3.base=(_ bv2147745877 32), ppp_timer_~ppp~3.offset=(_ bv0 32), ppp_timer_~proto___0~2.base=(_ bv0 32), ppp_timer_~proto___0~2.offset=(_ bv0 32), ppp_timer_~tmp___0~6.base=(_ bv2147745877 32), ppp_timer_~tmp___0~6.offset=(_ bv435 32), ppp_timer_~tmp~16.base=(_ bv2147745877 32), ppp_timer_~tmp~16.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |ppp_timer_#in~arg|=(_ bv0 64), |ppp_timer_#t~mem198|=(_ bv6 8), |ppp_timer_#t~mem206|=(_ bv0 16), |ppp_timer_#t~switch199|=true, |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume 49185bv32 != ~zero_extendFrom16To32(#t~mem206);havoc #t~mem206; VAL [ppp_timer_~arg=(_ bv0 64), ppp_timer_~ppp~3.base=(_ bv2147745877 32), ppp_timer_~ppp~3.offset=(_ bv0 32), ppp_timer_~proto___0~2.base=(_ bv0 32), ppp_timer_~proto___0~2.offset=(_ bv0 32), ppp_timer_~tmp___0~6.base=(_ bv2147745877 32), ppp_timer_~tmp___0~6.offset=(_ bv435 32), ppp_timer_~tmp~16.base=(_ bv2147745877 32), ppp_timer_~tmp~16.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |ppp_timer_#in~arg|=(_ bv0 64), |ppp_timer_#t~mem198|=(_ bv6 8), |ppp_timer_#t~switch199|=true, |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call spin_unlock_irqrestore(~ppp~3.base, ~bvadd32(435bv32, ~ppp~3.offset), ~flags~1); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |spin_unlock_irqrestore_#in~flags|=(_ bv0 64), |spin_unlock_irqrestore_#in~lock.base|=(_ bv2147745877 32), |spin_unlock_irqrestore_#in~lock.offset|=(_ bv435 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~lock.base, ~lock.offset := #in~lock.base, #in~lock.offset;~flags := #in~flags;call _raw_spin_unlock_irqrestore(~lock.base, ~lock.offset, ~flags); VAL [spin_unlock_irqrestore_~flags=(_ bv0 64), spin_unlock_irqrestore_~lock.base=(_ bv2147745877 32), spin_unlock_irqrestore_~lock.offset=(_ bv435 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |spin_unlock_irqrestore_#in~flags|=(_ bv0 64), |spin_unlock_irqrestore_#in~lock.base|=(_ bv2147745877 32), |spin_unlock_irqrestore_#in~lock.offset|=(_ bv435 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume true; VAL [spin_unlock_irqrestore_~flags=(_ bv0 64), spin_unlock_irqrestore_~lock.base=(_ bv2147745877 32), spin_unlock_irqrestore_~lock.offset=(_ bv435 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |spin_unlock_irqrestore_#in~flags|=(_ bv0 64), |spin_unlock_irqrestore_#in~lock.base|=(_ bv2147745877 32), |spin_unlock_irqrestore_#in~lock.offset|=(_ bv435 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] RET #1461#return; VAL [ppp_timer_~arg=(_ bv0 64), ppp_timer_~flags~1=(_ bv0 64), ppp_timer_~ppp~3.base=(_ bv2147745877 32), ppp_timer_~ppp~3.offset=(_ bv0 32), ppp_timer_~proto___0~2.base=(_ bv0 32), ppp_timer_~proto___0~2.offset=(_ bv0 32), ppp_timer_~tmp___0~6.base=(_ bv2147745877 32), ppp_timer_~tmp___0~6.offset=(_ bv435 32), ppp_timer_~tmp~16.base=(_ bv2147745877 32), ppp_timer_~tmp~16.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |ppp_timer_#in~arg|=(_ bv0 64), |ppp_timer_#t~mem198|=(_ bv6 8), |ppp_timer_#t~switch199|=true, |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call ppp_tx_flush(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] havoc ~skb~0.base, ~skb~0.offset; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call #t~ret81.base, #t~ret81.offset := ldv_skb_dequeue_12(~#tx_queue~0.base, ~#tx_queue~0.offset); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_skb_dequeue_12_#in~ldv_func_arg1.base|=(_ bv2147745877 32), |ldv_skb_dequeue_12_#in~ldv_func_arg1.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~ldv_func_arg1.base, ~ldv_func_arg1.offset := #in~ldv_func_arg1.base, #in~ldv_func_arg1.offset;havoc ~tmp~21.base, ~tmp~21.offset; VAL [ldv_skb_dequeue_12_~ldv_func_arg1.base=(_ bv2147745877 32), ldv_skb_dequeue_12_~ldv_func_arg1.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_skb_dequeue_12_#in~ldv_func_arg1.base|=(_ bv2147745877 32), |ldv_skb_dequeue_12_#in~ldv_func_arg1.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call #t~ret283.base, #t~ret283.offset := ldv_skb_alloc(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] havoc ~skb~2.base, ~skb~2.offset;havoc ~tmp___7~3.base, ~tmp___7~3.offset; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call #t~ret293.base, #t~ret293.offset := ldv_zalloc(248bv32); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv248 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~size := #in~size;havoc ~p~1.base, ~p~1.offset;havoc ~tmp~2.base, ~tmp~2.offset;havoc ~tmp___0~1;~tmp___0~1 := #t~nondet38;havoc #t~nondet38; VAL [ldv_zalloc_~size=(_ bv248 32), ldv_zalloc_~tmp___0~1=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv248 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume !(0bv32 != ~tmp___0~1);call #t~malloc39.base, #t~malloc39.offset := #Ultimate.alloc(~size); VAL [ldv_zalloc_~size=(_ bv248 32), ldv_zalloc_~tmp___0~1=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv248 32), |ldv_zalloc_#t~malloc39.base|=(_ bv2818834517 32), |ldv_zalloc_#t~malloc39.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call #Ultimate.meminit(#t~malloc39.base, #t~malloc39.offset, 1bv32, ~size, ~size); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |#Ultimate.meminit_#amountOfFields|=(_ bv1 32), |#Ultimate.meminit_#product|=(_ bv248 32), |#Ultimate.meminit_#ptr.base|=(_ bv2818834517 32), |#Ultimate.meminit_#ptr.offset|=(_ bv0 32), |#Ultimate.meminit_#sizeOfFields|=(_ bv248 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] #memory_int := ~initToZeroAtPointerBaseAddress~int(#memory_int, #ptr.base); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |#Ultimate.meminit_#amountOfFields|=(_ bv1 32), |#Ultimate.meminit_#product|=(_ bv248 32), |#Ultimate.meminit_#ptr.base|=(_ bv2818834517 32), |#Ultimate.meminit_#ptr.offset|=(_ bv0 32), |#Ultimate.meminit_#sizeOfFields|=(_ bv248 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume true; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |#Ultimate.meminit_#amountOfFields|=(_ bv1 32), |#Ultimate.meminit_#product|=(_ bv248 32), |#Ultimate.meminit_#ptr.base|=(_ bv2818834517 32), |#Ultimate.meminit_#ptr.offset|=(_ bv0 32), |#Ultimate.meminit_#sizeOfFields|=(_ bv248 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] RET #1647#return; VAL [ldv_zalloc_~size=(_ bv248 32), ldv_zalloc_~tmp___0~1=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv248 32), |ldv_zalloc_#t~malloc39.base|=(_ bv2818834517 32), |ldv_zalloc_#t~malloc39.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~tmp~2.base, ~tmp~2.offset := #t~malloc39.base, #t~malloc39.offset;~p~1.base, ~p~1.offset := ~tmp~2.base, ~tmp~2.offset;assume 0bv32 != (if ~sign_extendFrom32To64(~bvadd32(~p~1.base, ~p~1.offset)) != ~sign_extendFrom32To64(0bv32) then 1bv32 else 0bv32);#res.base, #res.offset := ~p~1.base, ~p~1.offset; VAL [ldv_zalloc_~p~1.base=(_ bv2818834517 32), ldv_zalloc_~p~1.offset=(_ bv0 32), ldv_zalloc_~size=(_ bv248 32), ldv_zalloc_~tmp___0~1=(_ bv0 32), ldv_zalloc_~tmp~2.base=(_ bv2818834517 32), ldv_zalloc_~tmp~2.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv248 32), |ldv_zalloc_#res.base|=(_ bv2818834517 32), |ldv_zalloc_#res.offset|=(_ bv0 32), |ldv_zalloc_#t~malloc39.base|=(_ bv2818834517 32), |ldv_zalloc_#t~malloc39.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume true; VAL [ldv_zalloc_~p~1.base=(_ bv2818834517 32), ldv_zalloc_~p~1.offset=(_ bv0 32), ldv_zalloc_~size=(_ bv248 32), ldv_zalloc_~tmp___0~1=(_ bv0 32), ldv_zalloc_~tmp~2.base=(_ bv2818834517 32), ldv_zalloc_~tmp~2.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv248 32), |ldv_zalloc_#res.base|=(_ bv2818834517 32), |ldv_zalloc_#res.offset|=(_ bv0 32), |ldv_zalloc_#t~malloc39.base|=(_ bv2818834517 32), |ldv_zalloc_#t~malloc39.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] RET #1439#return; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_skb_alloc_#t~ret293.base|=(_ bv2818834517 32), |ldv_skb_alloc_#t~ret293.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~tmp___7~3.base, ~tmp___7~3.offset := #t~ret293.base, #t~ret293.offset;havoc #t~ret293.base, #t~ret293.offset;~skb~2.base, ~skb~2.offset := ~tmp___7~3.base, ~tmp___7~3.offset; VAL [ldv_skb_alloc_~skb~2.base=(_ bv2818834517 32), ldv_skb_alloc_~skb~2.offset=(_ bv0 32), ldv_skb_alloc_~tmp___7~3.base=(_ bv2818834517 32), ldv_skb_alloc_~tmp___7~3.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume !(~skb~2.base == 0bv32 && ~skb~2.offset == 0bv32); VAL [ldv_skb_alloc_~skb~2.base=(_ bv2818834517 32), ldv_skb_alloc_~skb~2.offset=(_ bv0 32), ldv_skb_alloc_~tmp___7~3.base=(_ bv2818834517 32), ldv_skb_alloc_~tmp___7~3.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call ldv_set_add(~LDV_SKBS~0.base, ~LDV_SKBS~0.offset, ~skb~2.base, ~skb~2.offset); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_set_add_#in~e.base|=(_ bv2818834517 32), |ldv_set_add_#in~e.offset|=(_ bv0 32), |ldv_set_add_#in~set.base|=(_ bv0 32), |ldv_set_add_#in~set.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~set.base, ~set.offset := #in~set.base, #in~set.offset;~e.base, ~e.offset := #in~e.base, #in~e.offset;havoc ~i~1;~i~1 := 0bv32; VAL [ldv_set_add_~e.base=(_ bv2818834517 32), ldv_set_add_~e.offset=(_ bv0 32), ldv_set_add_~i~1=(_ bv0 32), ldv_set_add_~set.base=(_ bv0 32), ldv_set_add_~set.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_set_add_#in~e.base|=(_ bv2818834517 32), |ldv_set_add_#in~e.offset|=(_ bv0 32), |ldv_set_add_#in~set.base|=(_ bv0 32), |ldv_set_add_#in~set.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume !false; VAL [ldv_set_add_~e.base=(_ bv2818834517 32), ldv_set_add_~e.offset=(_ bv0 32), ldv_set_add_~i~1=(_ bv0 32), ldv_set_add_~set.base=(_ bv0 32), ldv_set_add_~set.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_set_add_#in~e.base|=(_ bv2818834517 32), |ldv_set_add_#in~e.offset|=(_ bv0 32), |ldv_set_add_#in~set.base|=(_ bv0 32), |ldv_set_add_#in~set.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume !~bvslt32(~i~1, ~last_index~0); VAL [ldv_set_add_~e.base=(_ bv2818834517 32), ldv_set_add_~e.offset=(_ bv0 32), ldv_set_add_~i~1=(_ bv0 32), ldv_set_add_~set.base=(_ bv0 32), ldv_set_add_~set.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_set_add_#in~e.base|=(_ bv2818834517 32), |ldv_set_add_#in~e.offset|=(_ bv0 32), |ldv_set_add_#in~set.base|=(_ bv0 32), |ldv_set_add_#in~set.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume ~bvslt32(~last_index~0, 15bv32);call write~$Pointer$(~e.base, ~e.offset, ~#set_impl~0.base, ~bvadd32(~#set_impl~0.offset, ~bvmul32(8bv32, ~last_index~0)), 8bv32);~last_index~0 := ~bvadd32(1bv32, ~last_index~0); VAL [ldv_set_add_~e.base=(_ bv2818834517 32), ldv_set_add_~e.offset=(_ bv0 32), ldv_set_add_~i~1=(_ bv0 32), ldv_set_add_~set.base=(_ bv0 32), ldv_set_add_~set.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_set_add_#in~e.base|=(_ bv2818834517 32), |ldv_set_add_#in~e.offset|=(_ bv0 32), |ldv_set_add_#in~set.base|=(_ bv0 32), |ldv_set_add_#in~set.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume true; VAL [ldv_set_add_~e.base=(_ bv2818834517 32), ldv_set_add_~e.offset=(_ bv0 32), ldv_set_add_~i~1=(_ bv0 32), ldv_set_add_~set.base=(_ bv0 32), ldv_set_add_~set.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_set_add_#in~e.base|=(_ bv2818834517 32), |ldv_set_add_#in~e.offset|=(_ bv0 32), |ldv_set_add_#in~set.base|=(_ bv0 32), |ldv_set_add_#in~set.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] RET #1441#return; VAL [ldv_skb_alloc_~skb~2.base=(_ bv2818834517 32), ldv_skb_alloc_~skb~2.offset=(_ bv0 32), ldv_skb_alloc_~tmp___7~3.base=(_ bv2818834517 32), ldv_skb_alloc_~tmp___7~3.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] #res.base, #res.offset := ~skb~2.base, ~skb~2.offset; VAL [ldv_skb_alloc_~skb~2.base=(_ bv2818834517 32), ldv_skb_alloc_~skb~2.offset=(_ bv0 32), ldv_skb_alloc_~tmp___7~3.base=(_ bv2818834517 32), ldv_skb_alloc_~tmp___7~3.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_skb_alloc_#res.base|=(_ bv2818834517 32), |ldv_skb_alloc_#res.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume true; VAL [ldv_skb_alloc_~skb~2.base=(_ bv2818834517 32), ldv_skb_alloc_~skb~2.offset=(_ bv0 32), ldv_skb_alloc_~tmp___7~3.base=(_ bv2818834517 32), ldv_skb_alloc_~tmp___7~3.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_skb_alloc_#res.base|=(_ bv2818834517 32), |ldv_skb_alloc_#res.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] RET #1445#return; VAL [ldv_skb_dequeue_12_~ldv_func_arg1.base=(_ bv2147745877 32), ldv_skb_dequeue_12_~ldv_func_arg1.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_skb_dequeue_12_#in~ldv_func_arg1.base|=(_ bv2147745877 32), |ldv_skb_dequeue_12_#in~ldv_func_arg1.offset|=(_ bv0 32), |ldv_skb_dequeue_12_#t~ret283.base|=(_ bv2818834517 32), |ldv_skb_dequeue_12_#t~ret283.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~tmp~21.base, ~tmp~21.offset := #t~ret283.base, #t~ret283.offset;havoc #t~ret283.base, #t~ret283.offset;#res.base, #res.offset := ~tmp~21.base, ~tmp~21.offset; VAL [ldv_skb_dequeue_12_~ldv_func_arg1.base=(_ bv2147745877 32), ldv_skb_dequeue_12_~ldv_func_arg1.offset=(_ bv0 32), ldv_skb_dequeue_12_~tmp~21.base=(_ bv2818834517 32), ldv_skb_dequeue_12_~tmp~21.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_skb_dequeue_12_#in~ldv_func_arg1.base|=(_ bv2147745877 32), |ldv_skb_dequeue_12_#in~ldv_func_arg1.offset|=(_ bv0 32), |ldv_skb_dequeue_12_#res.base|=(_ bv2818834517 32), |ldv_skb_dequeue_12_#res.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume true; VAL [ldv_skb_dequeue_12_~ldv_func_arg1.base=(_ bv2147745877 32), ldv_skb_dequeue_12_~ldv_func_arg1.offset=(_ bv0 32), ldv_skb_dequeue_12_~tmp~21.base=(_ bv2818834517 32), ldv_skb_dequeue_12_~tmp~21.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_skb_dequeue_12_#in~ldv_func_arg1.base|=(_ bv2147745877 32), |ldv_skb_dequeue_12_#in~ldv_func_arg1.offset|=(_ bv0 32), |ldv_skb_dequeue_12_#res.base|=(_ bv2818834517 32), |ldv_skb_dequeue_12_#res.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] RET #1443#return; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |ppp_tx_flush_#t~ret81.base|=(_ bv2818834517 32), |ppp_tx_flush_#t~ret81.offset|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~skb~0.base, ~skb~0.offset := #t~ret81.base, #t~ret81.offset;havoc #t~ret81.base, #t~ret81.offset; VAL [ppp_tx_flush_~skb~0.base=(_ bv2818834517 32), ppp_tx_flush_~skb~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume ~sign_extendFrom32To64(~bvadd32(~skb~0.base, ~skb~0.offset)) != ~sign_extendFrom32To64(0bv32); VAL [ppp_tx_flush_~skb~0.base=(_ bv2818834517 32), ppp_tx_flush_~skb~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] call #t~ret80 := dev_queue_xmit(~skb~0.base, ~skb~0.offset);havoc #t~ret80; VAL [ppp_tx_flush_~skb~0.base=(_ bv2818834517 32), ppp_tx_flush_~skb~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call #t~ret81.base, #t~ret81.offset := ldv_skb_dequeue_12(~#tx_queue~0.base, ~#tx_queue~0.offset); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_skb_dequeue_12_#in~ldv_func_arg1.base|=(_ bv2147745877 32), |ldv_skb_dequeue_12_#in~ldv_func_arg1.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv1 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~ldv_func_arg1.base, ~ldv_func_arg1.offset := #in~ldv_func_arg1.base, #in~ldv_func_arg1.offset;havoc ~tmp~21.base, ~tmp~21.offset; VAL [ldv_skb_dequeue_12_~ldv_func_arg1.base=(_ bv2147745877 32), ldv_skb_dequeue_12_~ldv_func_arg1.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_skb_dequeue_12_#in~ldv_func_arg1.base|=(_ bv2147745877 32), |ldv_skb_dequeue_12_#in~ldv_func_arg1.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv1 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call #t~ret283.base, #t~ret283.offset := ldv_skb_alloc(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv1 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] havoc ~skb~2.base, ~skb~2.offset;havoc ~tmp___7~3.base, ~tmp___7~3.offset; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv1 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call #t~ret293.base, #t~ret293.offset := ldv_zalloc(248bv32); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv248 32), |old(~last_index~0)|=(_ bv1 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~size := #in~size;havoc ~p~1.base, ~p~1.offset;havoc ~tmp~2.base, ~tmp~2.offset;havoc ~tmp___0~1;~tmp___0~1 := #t~nondet38;havoc #t~nondet38; VAL [ldv_zalloc_~size=(_ bv248 32), ldv_zalloc_~tmp___0~1=(_ bv1 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv248 32), |old(~last_index~0)|=(_ bv1 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume 0bv32 != ~tmp___0~1;#res.base, #res.offset := 0bv32, 0bv32; VAL [ldv_zalloc_~size=(_ bv248 32), ldv_zalloc_~tmp___0~1=(_ bv1 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv248 32), |ldv_zalloc_#res.base|=(_ bv0 32), |ldv_zalloc_#res.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv1 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume true; VAL [ldv_zalloc_~size=(_ bv248 32), ldv_zalloc_~tmp___0~1=(_ bv1 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_zalloc_#in~size|=(_ bv248 32), |ldv_zalloc_#res.base|=(_ bv0 32), |ldv_zalloc_#res.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv1 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] RET #1439#return; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_skb_alloc_#t~ret293.base|=(_ bv0 32), |ldv_skb_alloc_#t~ret293.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv1 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~tmp___7~3.base, ~tmp___7~3.offset := #t~ret293.base, #t~ret293.offset;havoc #t~ret293.base, #t~ret293.offset;~skb~2.base, ~skb~2.offset := ~tmp___7~3.base, ~tmp___7~3.offset; VAL [ldv_skb_alloc_~skb~2.base=(_ bv0 32), ldv_skb_alloc_~skb~2.offset=(_ bv0 32), ldv_skb_alloc_~tmp___7~3.base=(_ bv0 32), ldv_skb_alloc_~tmp___7~3.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv1 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume ~skb~2.base == 0bv32 && ~skb~2.offset == 0bv32;#res.base, #res.offset := 0bv32, 0bv32; VAL [ldv_skb_alloc_~skb~2.base=(_ bv0 32), ldv_skb_alloc_~skb~2.offset=(_ bv0 32), ldv_skb_alloc_~tmp___7~3.base=(_ bv0 32), ldv_skb_alloc_~tmp___7~3.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_skb_alloc_#res.base|=(_ bv0 32), |ldv_skb_alloc_#res.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv1 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume true; VAL [ldv_skb_alloc_~skb~2.base=(_ bv0 32), ldv_skb_alloc_~skb~2.offset=(_ bv0 32), ldv_skb_alloc_~tmp___7~3.base=(_ bv0 32), ldv_skb_alloc_~tmp___7~3.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_skb_alloc_#res.base|=(_ bv0 32), |ldv_skb_alloc_#res.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv1 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] RET #1445#return; VAL [ldv_skb_dequeue_12_~ldv_func_arg1.base=(_ bv2147745877 32), ldv_skb_dequeue_12_~ldv_func_arg1.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_skb_dequeue_12_#in~ldv_func_arg1.base|=(_ bv2147745877 32), |ldv_skb_dequeue_12_#in~ldv_func_arg1.offset|=(_ bv0 32), |ldv_skb_dequeue_12_#t~ret283.base|=(_ bv0 32), |ldv_skb_dequeue_12_#t~ret283.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv1 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~tmp~21.base, ~tmp~21.offset := #t~ret283.base, #t~ret283.offset;havoc #t~ret283.base, #t~ret283.offset;#res.base, #res.offset := ~tmp~21.base, ~tmp~21.offset; VAL [ldv_skb_dequeue_12_~ldv_func_arg1.base=(_ bv2147745877 32), ldv_skb_dequeue_12_~ldv_func_arg1.offset=(_ bv0 32), ldv_skb_dequeue_12_~tmp~21.base=(_ bv0 32), ldv_skb_dequeue_12_~tmp~21.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_skb_dequeue_12_#in~ldv_func_arg1.base|=(_ bv2147745877 32), |ldv_skb_dequeue_12_#in~ldv_func_arg1.offset|=(_ bv0 32), |ldv_skb_dequeue_12_#res.base|=(_ bv0 32), |ldv_skb_dequeue_12_#res.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv1 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume true; VAL [ldv_skb_dequeue_12_~ldv_func_arg1.base=(_ bv2147745877 32), ldv_skb_dequeue_12_~ldv_func_arg1.offset=(_ bv0 32), ldv_skb_dequeue_12_~tmp~21.base=(_ bv0 32), ldv_skb_dequeue_12_~tmp~21.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_skb_dequeue_12_#in~ldv_func_arg1.base|=(_ bv2147745877 32), |ldv_skb_dequeue_12_#in~ldv_func_arg1.offset|=(_ bv0 32), |ldv_skb_dequeue_12_#res.base|=(_ bv0 32), |ldv_skb_dequeue_12_#res.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv1 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] RET #1443#return; VAL [ppp_tx_flush_~skb~0.base=(_ bv2818834517 32), ppp_tx_flush_~skb~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |ppp_tx_flush_#t~ret81.base|=(_ bv0 32), |ppp_tx_flush_#t~ret81.offset|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~skb~0.base, ~skb~0.offset := #t~ret81.base, #t~ret81.offset;havoc #t~ret81.base, #t~ret81.offset; VAL [ppp_tx_flush_~skb~0.base=(_ bv0 32), ppp_tx_flush_~skb~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume !(~sign_extendFrom32To64(~bvadd32(~skb~0.base, ~skb~0.offset)) != ~sign_extendFrom32To64(0bv32)); VAL [ppp_tx_flush_~skb~0.base=(_ bv0 32), ppp_tx_flush_~skb~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume true; VAL [ppp_tx_flush_~skb~0.base=(_ bv0 32), ppp_tx_flush_~skb~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] RET #1463#return; VAL [ppp_timer_~arg=(_ bv0 64), ppp_timer_~flags~1=(_ bv0 64), ppp_timer_~ppp~3.base=(_ bv2147745877 32), ppp_timer_~ppp~3.offset=(_ bv0 32), ppp_timer_~proto___0~2.base=(_ bv0 32), ppp_timer_~proto___0~2.offset=(_ bv0 32), ppp_timer_~tmp___0~6.base=(_ bv2147745877 32), ppp_timer_~tmp___0~6.offset=(_ bv435 32), ppp_timer_~tmp~16.base=(_ bv2147745877 32), ppp_timer_~tmp~16.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |ppp_timer_#in~arg|=(_ bv0 64), |ppp_timer_#t~mem198|=(_ bv6 8), |ppp_timer_#t~switch199|=true, |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume true; VAL [ppp_timer_~arg=(_ bv0 64), ppp_timer_~flags~1=(_ bv0 64), ppp_timer_~ppp~3.base=(_ bv2147745877 32), ppp_timer_~ppp~3.offset=(_ bv0 32), ppp_timer_~proto___0~2.base=(_ bv0 32), ppp_timer_~proto___0~2.offset=(_ bv0 32), ppp_timer_~tmp___0~6.base=(_ bv2147745877 32), ppp_timer_~tmp___0~6.offset=(_ bv435 32), ppp_timer_~tmp~16.base=(_ bv2147745877 32), ppp_timer_~tmp~16.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |ppp_timer_#in~arg|=(_ bv0 64), |ppp_timer_#t~mem198|=(_ bv6 8), |ppp_timer_#t~switch199|=true, |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] RET #1637#return; VAL [|##fun~C_ULONG~TO~VOID_#in~#fp.base|=(_ bv0 32), |##fun~C_ULONG~TO~VOID_#in~#fp.offset|=(_ bv0 32), |##fun~C_ULONG~TO~VOID_#in~242|=(_ bv0 64), |##fun~C_ULONG~TO~VOID_#~242|=(_ bv0 64), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume true; VAL [|##fun~C_ULONG~TO~VOID_#in~#fp.base|=(_ bv0 32), |##fun~C_ULONG~TO~VOID_#in~#fp.offset|=(_ bv0 32), |##fun~C_ULONG~TO~VOID_#in~242|=(_ bv0 64), |##fun~C_ULONG~TO~VOID_#~242|=(_ bv0 64), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] RET #1639#return; VAL [choose_timer_1_~timer.base=(_ bv0 32), choose_timer_1_~timer.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |choose_timer_1_#in~timer.base|=(_ bv0 32), |choose_timer_1_#in~timer.offset|=(_ bv0 32), |choose_timer_1_#t~mem243|=(_ bv0 64), |choose_timer_1_#t~mem244.base|=(_ bv0 32), |choose_timer_1_#t~mem244.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv2 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv0 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] havoc #t~mem243;havoc #t~mem244.base, #t~mem244.offset;~LDV_IN_INTERRUPT~0 := 1bv32;~ldv_timer_state_1~0 := 2bv32; VAL [choose_timer_1_~timer.base=(_ bv0 32), choose_timer_1_~timer.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |choose_timer_1_#in~timer.base|=(_ bv0 32), |choose_timer_1_#in~timer.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv2 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume true; VAL [choose_timer_1_~timer.base=(_ bv0 32), choose_timer_1_~timer.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |choose_timer_1_#in~timer.base|=(_ bv0 32), |choose_timer_1_#in~timer.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv2 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] RET #1479#return; VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg2~0.base=(_ bv0 32), main_~ldvarg2~0.offset=(_ bv0 32), main_~ldvarg3~0.base=(_ bv0 32), main_~ldvarg3~0.offset=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~ldvarg5~0.base=(_ bv0 32), main_~ldvarg5~0.offset=(_ bv0 32), main_~ldvarg6~0.base=(_ bv0 32), main_~ldvarg6~0.offset=(_ bv0 32), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp___2~5.base=(_ bv0 32), main_~tmp___2~5.offset=(_ bv0 32), main_~tmp___3~2.base=(_ bv0 32), main_~tmp___3~2.offset=(_ bv0 32), main_~tmp___4~3.base=(_ bv0 32), main_~tmp___4~3.offset=(_ bv0 32), main_~tmp___5~1.base=(_ bv0 32), main_~tmp___5~1.offset=(_ bv0 32), main_~tmp___6~1=(_ bv0 32), main_~tmp___7~1=(_ bv1 32), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |main_#t~switch253|=true, |main_#t~switch255|=true, |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv2 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~tmp___6~1 := #t~nondet252;havoc #t~nondet252;#t~switch253 := 0bv32 == ~tmp___6~1; VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg2~0.base=(_ bv0 32), main_~ldvarg2~0.offset=(_ bv0 32), main_~ldvarg3~0.base=(_ bv0 32), main_~ldvarg3~0.offset=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~ldvarg5~0.base=(_ bv0 32), main_~ldvarg5~0.offset=(_ bv0 32), main_~ldvarg6~0.base=(_ bv0 32), main_~ldvarg6~0.offset=(_ bv0 32), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp___2~5.base=(_ bv0 32), main_~tmp___2~5.offset=(_ bv0 32), main_~tmp___3~2.base=(_ bv0 32), main_~tmp___3~2.offset=(_ bv0 32), main_~tmp___4~3.base=(_ bv0 32), main_~tmp___4~3.offset=(_ bv0 32), main_~tmp___5~1.base=(_ bv0 32), main_~tmp___5~1.offset=(_ bv0 32), main_~tmp___6~1=(_ bv1 32), main_~tmp___7~1=(_ bv1 32), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |main_#t~switch253|=false, |main_#t~switch255|=true, |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv2 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume !#t~switch253;#t~switch253 := #t~switch253 || 1bv32 == ~tmp___6~1; VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg2~0.base=(_ bv0 32), main_~ldvarg2~0.offset=(_ bv0 32), main_~ldvarg3~0.base=(_ bv0 32), main_~ldvarg3~0.offset=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~ldvarg5~0.base=(_ bv0 32), main_~ldvarg5~0.offset=(_ bv0 32), main_~ldvarg6~0.base=(_ bv0 32), main_~ldvarg6~0.offset=(_ bv0 32), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp___2~5.base=(_ bv0 32), main_~tmp___2~5.offset=(_ bv0 32), main_~tmp___3~2.base=(_ bv0 32), main_~tmp___3~2.offset=(_ bv0 32), main_~tmp___4~3.base=(_ bv0 32), main_~tmp___4~3.offset=(_ bv0 32), main_~tmp___5~1.base=(_ bv0 32), main_~tmp___5~1.offset=(_ bv0 32), main_~tmp___6~1=(_ bv1 32), main_~tmp___7~1=(_ bv1 32), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |main_#t~switch253|=true, |main_#t~switch255|=true, |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv2 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume #t~switch253; VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg2~0.base=(_ bv0 32), main_~ldvarg2~0.offset=(_ bv0 32), main_~ldvarg3~0.base=(_ bv0 32), main_~ldvarg3~0.offset=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~ldvarg5~0.base=(_ bv0 32), main_~ldvarg5~0.offset=(_ bv0 32), main_~ldvarg6~0.base=(_ bv0 32), main_~ldvarg6~0.offset=(_ bv0 32), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp___2~5.base=(_ bv0 32), main_~tmp___2~5.offset=(_ bv0 32), main_~tmp___3~2.base=(_ bv0 32), main_~tmp___3~2.offset=(_ bv0 32), main_~tmp___4~3.base=(_ bv0 32), main_~tmp___4~3.offset=(_ bv0 32), main_~tmp___5~1.base=(_ bv0 32), main_~tmp___5~1.offset=(_ bv0 32), main_~tmp___6~1=(_ bv1 32), main_~tmp___7~1=(_ bv1 32), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |main_#t~switch253|=true, |main_#t~switch255|=true, |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv2 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume 0bv32 != ~ldv_state_variable_0~0;~tmp___7~1 := #t~nondet254;havoc #t~nondet254;#t~switch255 := 0bv32 == ~tmp___7~1; VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg2~0.base=(_ bv0 32), main_~ldvarg2~0.offset=(_ bv0 32), main_~ldvarg3~0.base=(_ bv0 32), main_~ldvarg3~0.offset=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~ldvarg5~0.base=(_ bv0 32), main_~ldvarg5~0.offset=(_ bv0 32), main_~ldvarg6~0.base=(_ bv0 32), main_~ldvarg6~0.offset=(_ bv0 32), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp___2~5.base=(_ bv0 32), main_~tmp___2~5.offset=(_ bv0 32), main_~tmp___3~2.base=(_ bv0 32), main_~tmp___3~2.offset=(_ bv0 32), main_~tmp___4~3.base=(_ bv0 32), main_~tmp___4~3.offset=(_ bv0 32), main_~tmp___5~1.base=(_ bv0 32), main_~tmp___5~1.offset=(_ bv0 32), main_~tmp___6~1=(_ bv1 32), main_~tmp___7~1=(_ bv0 32), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |main_#t~switch253|=true, |main_#t~switch255|=true, |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv2 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume #t~switch255; VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg2~0.base=(_ bv0 32), main_~ldvarg2~0.offset=(_ bv0 32), main_~ldvarg3~0.base=(_ bv0 32), main_~ldvarg3~0.offset=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~ldvarg5~0.base=(_ bv0 32), main_~ldvarg5~0.offset=(_ bv0 32), main_~ldvarg6~0.base=(_ bv0 32), main_~ldvarg6~0.offset=(_ bv0 32), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp___2~5.base=(_ bv0 32), main_~tmp___2~5.offset=(_ bv0 32), main_~tmp___3~2.base=(_ bv0 32), main_~tmp___3~2.offset=(_ bv0 32), main_~tmp___4~3.base=(_ bv0 32), main_~tmp___4~3.offset=(_ bv0 32), main_~tmp___5~1.base=(_ bv0 32), main_~tmp___5~1.offset=(_ bv0 32), main_~tmp___6~1=(_ bv1 32), main_~tmp___7~1=(_ bv0 32), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |main_#t~switch253|=true, |main_#t~switch255|=true, |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv2 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume 3bv32 == ~ldv_state_variable_0~0 && 0bv32 == ~ref_cnt~0; VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg2~0.base=(_ bv0 32), main_~ldvarg2~0.offset=(_ bv0 32), main_~ldvarg3~0.base=(_ bv0 32), main_~ldvarg3~0.offset=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~ldvarg5~0.base=(_ bv0 32), main_~ldvarg5~0.offset=(_ bv0 32), main_~ldvarg6~0.base=(_ bv0 32), main_~ldvarg6~0.offset=(_ bv0 32), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp___2~5.base=(_ bv0 32), main_~tmp___2~5.offset=(_ bv0 32), main_~tmp___3~2.base=(_ bv0 32), main_~tmp___3~2.offset=(_ bv0 32), main_~tmp___4~3.base=(_ bv0 32), main_~tmp___4~3.offset=(_ bv0 32), main_~tmp___5~1.base=(_ bv0 32), main_~tmp___5~1.offset=(_ bv0 32), main_~tmp___6~1=(_ bv1 32), main_~tmp___7~1=(_ bv0 32), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |main_#t~switch253|=true, |main_#t~switch255|=true, |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv2 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call mod_exit(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv2 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] call unregister_hdlc_protocol(~#proto~0.base, ~#proto~0.offset); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv2 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume true; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv2 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] RET #1481#return; VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg2~0.base=(_ bv0 32), main_~ldvarg2~0.offset=(_ bv0 32), main_~ldvarg3~0.base=(_ bv0 32), main_~ldvarg3~0.offset=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~ldvarg5~0.base=(_ bv0 32), main_~ldvarg5~0.offset=(_ bv0 32), main_~ldvarg6~0.base=(_ bv0 32), main_~ldvarg6~0.offset=(_ bv0 32), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp___2~5.base=(_ bv0 32), main_~tmp___2~5.offset=(_ bv0 32), main_~tmp___3~2.base=(_ bv0 32), main_~tmp___3~2.offset=(_ bv0 32), main_~tmp___4~3.base=(_ bv0 32), main_~tmp___4~3.offset=(_ bv0 32), main_~tmp___5~1.base=(_ bv0 32), main_~tmp___5~1.offset=(_ bv0 32), main_~tmp___6~1=(_ bv1 32), main_~tmp___7~1=(_ bv0 32), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |main_#t~switch253|=true, |main_#t~switch255|=true, |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv3 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv2 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~ldv_state_variable_0~0 := 2bv32; VAL [main_~ldvarg0~0.base=(_ bv0 32), main_~ldvarg0~0.offset=(_ bv0 32), main_~ldvarg1~0=(_ bv0 32), main_~ldvarg2~0.base=(_ bv0 32), main_~ldvarg2~0.offset=(_ bv0 32), main_~ldvarg3~0.base=(_ bv0 32), main_~ldvarg3~0.offset=(_ bv0 32), main_~ldvarg4~0=(_ bv0 16), main_~ldvarg5~0.base=(_ bv0 32), main_~ldvarg5~0.offset=(_ bv0 32), main_~ldvarg6~0.base=(_ bv0 32), main_~ldvarg6~0.offset=(_ bv0 32), main_~tmp___0~9=(_ bv0 32), main_~tmp___1~3=(_ bv0 16), main_~tmp___2~5.base=(_ bv0 32), main_~tmp___2~5.offset=(_ bv0 32), main_~tmp___3~2.base=(_ bv0 32), main_~tmp___3~2.offset=(_ bv0 32), main_~tmp___4~3.base=(_ bv0 32), main_~tmp___4~3.offset=(_ bv0 32), main_~tmp___5~1.base=(_ bv0 32), main_~tmp___5~1.offset=(_ bv0 32), main_~tmp___6~1=(_ bv1 32), main_~tmp___7~1=(_ bv0 32), main_~tmp~20.base=(_ bv0 32), main_~tmp~20.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |main_#t~switch253|=true, |main_#t~switch255|=true, |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv2 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv2 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call ldv_check_final_state(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv2 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv2 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] havoc ~tmp___7~7; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv2 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv2 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call #t~ret297 := ldv_set_is_empty(~LDV_SKBS~0.base, ~LDV_SKBS~0.offset); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_set_is_empty_#in~set.base|=(_ bv0 32), |ldv_set_is_empty_#in~set.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv2 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv2 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~set.base, ~set.offset := #in~set.base, #in~set.offset;#res := (if 0bv32 == ~last_index~0 then 1bv32 else 0bv32); VAL [ldv_set_is_empty_~set.base=(_ bv0 32), ldv_set_is_empty_~set.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_set_is_empty_#in~set.base|=(_ bv0 32), |ldv_set_is_empty_#in~set.offset|=(_ bv0 32), |ldv_set_is_empty_#res|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv2 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv2 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume true; VAL [ldv_set_is_empty_~set.base=(_ bv0 32), ldv_set_is_empty_~set.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_set_is_empty_#in~set.base|=(_ bv0 32), |ldv_set_is_empty_#in~set.offset|=(_ bv0 32), |ldv_set_is_empty_#res|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv2 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv2 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] RET #1643#return; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |ldv_check_final_state_#t~ret297|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv2 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv2 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] ~tmp___7~7 := #t~ret297;havoc #t~ret297; VAL [ldv_check_final_state_~tmp___7~7=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv2 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv2 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume !(0bv32 != ~tmp___7~7); VAL [ldv_check_final_state_~tmp___7~7=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv2 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv2 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call ldv_error(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv2 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv2 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] assume !false; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string114.base|=(_ bv2147483653 32), |#t~string114.offset|=(_ bv0 32), |#t~string121.base|=(_ bv2147483718 32), |#t~string121.offset|=(_ bv0 32), |#t~string211.base|=(_ bv2147745863 32), |#t~string211.offset|=(_ bv0 32), |#t~string22.base|=(_ bv2415919172 32), |#t~string22.offset|=(_ bv0 32), |#t~string237.base|=(_ bv2147745860 32), |#t~string237.offset|=(_ bv0 32), |#t~string64.base|=(_ bv2147745862 32), |#t~string64.offset|=(_ bv0 32), |#t~string65.base|=(_ bv2147745861 32), |#t~string65.offset|=(_ bv0 32), |#t~string66.base|=(_ bv2147745909 32), |#t~string66.offset|=(_ bv0 32), |#t~string84.base|=(_ bv2147754069 32), |#t~string84.offset|=(_ bv0 32), |old(~last_index~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv1 32), |old(~ldv_retval_0~0)|=(_ bv0 32), |old(~ldv_state_variable_0~0)|=(_ bv0 32), |old(~ldv_state_variable_1~0)|=(_ bv0 32), |old(~ldv_state_variable_2~0)|=(_ bv0 32), |old(~ldv_state_variable_3~0)|=(_ bv0 32), |old(~ldv_timer_list_1~0.base)|=(_ bv0 32), |old(~ldv_timer_list_1~0.offset)|=(_ bv0 32), |old(~ldv_timer_state_1~0)|=(_ bv0 32), |old(~proto_group0~0.base)|=(_ bv0 32), |old(~proto_group0~0.offset)|=(_ bv0 32), |old(~proto_group1~0.base)|=(_ bv0 32), |old(~proto_group1~0.offset)|=(_ bv0 32), |old(~ref_cnt~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#cp_table~0.base|=(_ bv2684616789 32), |~#cp_table~0.offset|=(_ bv0 32), |~#ppp_header_ops~0.base|=(_ bv2147745876 32), |~#ppp_header_ops~0.offset|=(_ bv0 32), |~#proto~0.base|=(_ bv2147745857 32), |~#proto~0.offset|=(_ bv0 32), |~#set_impl~0.base|=(_ bv2147483717 32), |~#set_impl~0.offset|=(_ bv0 32), |~#tx_queue~0.base|=(_ bv2147745877 32), |~#tx_queue~0.offset|=(_ bv0 32), ~last_index~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~ldv_retval_0~0=(_ bv0 32), ~LDV_SKBS~0.base=(_ bv0 32), ~LDV_SKBS~0.offset=(_ bv0 32), ~ldv_state_variable_0~0=(_ bv2 32), ~ldv_state_variable_1~0=(_ bv1 32), ~ldv_state_variable_2~0=(_ bv1 32), ~ldv_state_variable_3~0=(_ bv1 32), ~ldv_timer_list_1~0.base=(_ bv0 32), ~ldv_timer_list_1~0.offset=(_ bv0 32), ~ldv_timer_state_1~0=(_ bv2 32), ~proto_group0~0.base=(_ bv0 32), ~proto_group0~0.offset=(_ bv0 32), ~proto_group1~0.base=(_ bv0 32), ~proto_group1~0.offset=(_ bv0 32), ~ref_cnt~0=(_ bv0 32)] [?] CALL call ULTIMATE.init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=0bv32, #t~string114.offset=0bv32, #t~string121.base=0bv32, #t~string121.offset=0bv32, #t~string211.base=0bv32, #t~string211.offset=0bv32, #t~string22.base=0bv32, #t~string22.offset=0bv32, #t~string237.base=0bv32, #t~string237.offset=0bv32, #t~string64.base=0bv32, #t~string64.offset=0bv32, #t~string65.base=0bv32, #t~string65.offset=0bv32, #t~string66.base=0bv32, #t~string66.offset=0bv32, #t~string84.base=0bv32, #t~string84.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(#t~string114.base)=0bv32, old(#t~string114.offset)=0bv32, old(#t~string121.base)=0bv32, old(#t~string121.offset)=0bv32, old(#t~string211.base)=0bv32, old(#t~string211.offset)=0bv32, old(#t~string22.base)=0bv32, old(#t~string22.offset)=0bv32, old(#t~string237.base)=0bv32, old(#t~string237.offset)=0bv32, old(#t~string64.base)=0bv32, old(#t~string64.offset)=0bv32, old(#t~string65.base)=0bv32, old(#t~string65.offset)=0bv32, old(#t~string66.base)=0bv32, old(#t~string66.offset)=0bv32, old(#t~string84.base)=0bv32, old(#t~string84.offset)=0bv32, old(~#cp_table~0.base)=0bv32, old(~#cp_table~0.offset)=0bv32, old(~#ppp_header_ops~0.base)=0bv32, old(~#ppp_header_ops~0.offset)=0bv32, old(~#proto~0.base)=0bv32, old(~#proto~0.offset)=0bv32, old(~#set_impl~0.base)=0bv32, old(~#set_impl~0.offset)=0bv32, old(~#tx_queue~0.base)=0bv32, old(~#tx_queue~0.offset)=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~ldv_retval_0~0)=0bv32, old(~LDV_SKBS~0.base)=0bv32, old(~LDV_SKBS~0.offset)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#cp_table~0.base=0bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=0bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=0bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=0bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=0bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=0bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32] [?] #NULL.base, #NULL.offset := 0bv32, 0bv32; [?] #valid := #valid[0bv32 := 0bv1]; [L5195] call #t~string22.base, #t~string22.offset := #Ultimate.alloc(22bv32); [L5448] call #t~string64.base, #t~string64.offset := #Ultimate.alloc(4bv32); [L5448] call write~init~intINTTYPE1(76bv8, #t~string64.base, #t~string64.offset, 1bv32); [L5448] call write~init~intINTTYPE1(67bv8, #t~string64.base, ~bvadd32(1bv32, #t~string64.offset), 1bv32); [L5448] call write~init~intINTTYPE1(80bv8, #t~string64.base, ~bvadd32(2bv32, #t~string64.offset), 1bv32); [L5448] call write~init~intINTTYPE1(0bv8, #t~string64.base, ~bvadd32(3bv32, #t~string64.offset), 1bv32); [L5450] call #t~string65.base, #t~string65.offset := #Ultimate.alloc(5bv32); [L5450] call write~init~intINTTYPE1(73bv8, #t~string65.base, #t~string65.offset, 1bv32); [L5450] call write~init~intINTTYPE1(80bv8, #t~string65.base, ~bvadd32(1bv32, #t~string65.offset), 1bv32); [L5450] call write~init~intINTTYPE1(67bv8, #t~string65.base, ~bvadd32(2bv32, #t~string65.offset), 1bv32); [L5450] call write~init~intINTTYPE1(80bv8, #t~string65.base, ~bvadd32(3bv32, #t~string65.offset), 1bv32); [L5450] call write~init~intINTTYPE1(0bv8, #t~string65.base, ~bvadd32(4bv32, #t~string65.offset), 1bv32); [L5452] call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7bv32); [L5452] call write~init~intINTTYPE1(73bv8, #t~string66.base, #t~string66.offset, 1bv32); [L5452] call write~init~intINTTYPE1(80bv8, #t~string66.base, ~bvadd32(1bv32, #t~string66.offset), 1bv32); [L5452] call write~init~intINTTYPE1(86bv8, #t~string66.base, ~bvadd32(2bv32, #t~string66.offset), 1bv32); [L5452] call write~init~intINTTYPE1(54bv8, #t~string66.base, ~bvadd32(3bv32, #t~string66.offset), 1bv32); [L5452] call write~init~intINTTYPE1(67bv8, #t~string66.base, ~bvadd32(4bv32, #t~string66.offset), 1bv32); [L5452] call write~init~intINTTYPE1(80bv8, #t~string66.base, ~bvadd32(5bv32, #t~string66.offset), 1bv32); [L5452] call write~init~intINTTYPE1(0bv8, #t~string66.base, ~bvadd32(6bv32, #t~string66.offset), 1bv32); [L5561] call #t~string84.base, #t~string84.offset := #Ultimate.alloc(30bv32); [L5719] call #t~string114.base, #t~string114.offset := #Ultimate.alloc(7bv32); [L5719] call write~init~intINTTYPE1(37bv8, #t~string114.base, #t~string114.offset, 1bv32); [L5719] call write~init~intINTTYPE1(115bv8, #t~string114.base, ~bvadd32(1bv32, #t~string114.offset), 1bv32); [L5719] call write~init~intINTTYPE1(32bv8, #t~string114.base, ~bvadd32(2bv32, #t~string114.offset), 1bv32); [L5719] call write~init~intINTTYPE1(117bv8, #t~string114.base, ~bvadd32(3bv32, #t~string114.offset), 1bv32); [L5719] call write~init~intINTTYPE1(112bv8, #t~string114.base, ~bvadd32(4bv32, #t~string114.offset), 1bv32); [L5719] call write~init~intINTTYPE1(10bv8, #t~string114.base, ~bvadd32(5bv32, #t~string114.offset), 1bv32); [L5719] call write~init~intINTTYPE1(0bv8, #t~string114.base, ~bvadd32(6bv32, #t~string114.offset), 1bv32); [L5736] call #t~string121.base, #t~string121.offset := #Ultimate.alloc(9bv32); [L6035] call #t~string211.base, #t~string211.offset := #Ultimate.alloc(11bv32); [L6163] call #t~string237.base, #t~string237.offset := #Ultimate.alloc(21bv32); [L5333] ~LDV_IN_INTERRUPT~0 := 1bv32; [L5335] ~ldv_state_variable_0~0 := 0bv32; [L5336] ~ldv_state_variable_3~0 := 0bv32; [L5337] ~ldv_timer_state_1~0 := 0bv32; [L5338] ~ldv_state_variable_2~0 := 0bv32; [L5340] ~ref_cnt~0 := 0bv32; [L5341] ~ldv_state_variable_1~0 := 0bv32; [L5595-L5621] call ~#cp_table~0.base, ~#cp_table~0.offset := #Ultimate.alloc(364bv32); [L5595-L5621] call write~init~intINTTYPE4(163bv32, ~#cp_table~0.base, ~#cp_table~0.offset, 4bv32); [L5595-L5621] call write~init~intINTTYPE4(16bv32, ~#cp_table~0.base, ~bvadd32(4bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(16bv32, ~#cp_table~0.base, ~bvadd32(8bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(16bv32, ~#cp_table~0.base, ~bvadd32(12bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(16bv32, ~#cp_table~0.base, ~bvadd32(16bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(16bv32, ~#cp_table~0.base, ~bvadd32(20bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(16bv32, ~#cp_table~0.base, ~bvadd32(24bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(16bv32, ~#cp_table~0.base, ~bvadd32(28bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(0bv32, ~#cp_table~0.base, ~bvadd32(32bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(0bv32, ~#cp_table~0.base, ~bvadd32(36bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(0bv32, ~#cp_table~0.base, ~bvadd32(40bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(0bv32, ~#cp_table~0.base, ~bvadd32(44bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(0bv32, ~#cp_table~0.base, ~bvadd32(48bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(0bv32, ~#cp_table~0.base, ~bvadd32(52bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(16bv32, ~#cp_table~0.base, ~bvadd32(56bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(16bv32, ~#cp_table~0.base, ~bvadd32(60bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(1026bv32, ~#cp_table~0.base, ~bvadd32(64bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(131bv32, ~#cp_table~0.base, ~bvadd32(68bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(131bv32, ~#cp_table~0.base, ~bvadd32(72bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(133bv32, ~#cp_table~0.base, ~bvadd32(76bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(16bv32, ~#cp_table~0.base, ~bvadd32(80bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(16bv32, ~#cp_table~0.base, ~bvadd32(84bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(16bv32, ~#cp_table~0.base, ~bvadd32(88bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(1bv32, ~#cp_table~0.base, ~bvadd32(92bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(1bv32, ~#cp_table~0.base, ~bvadd32(96bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(1bv32, ~#cp_table~0.base, ~bvadd32(100bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(1bv32, ~#cp_table~0.base, ~bvadd32(104bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(16bv32, ~#cp_table~0.base, ~bvadd32(108bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(2048bv32, ~#cp_table~0.base, ~bvadd32(112bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(421bv32, ~#cp_table~0.base, ~bvadd32(116bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(2bv32, ~#cp_table~0.base, ~bvadd32(120bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(261bv32, ~#cp_table~0.base, ~bvadd32(124bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(262bv32, ~#cp_table~0.base, ~bvadd32(128bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(261bv32, ~#cp_table~0.base, ~bvadd32(132bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(389bv32, ~#cp_table~0.base, ~bvadd32(136bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(2048bv32, ~#cp_table~0.base, ~bvadd32(140bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(675bv32, ~#cp_table~0.base, ~bvadd32(144bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(2bv32, ~#cp_table~0.base, ~bvadd32(148bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(515bv32, ~#cp_table~0.base, ~bvadd32(152bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(516bv32, ~#cp_table~0.base, ~bvadd32(156bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(515bv32, ~#cp_table~0.base, ~bvadd32(160bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(643bv32, ~#cp_table~0.base, ~bvadd32(164bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(2048bv32, ~#cp_table~0.base, ~bvadd32(168bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(2049bv32, ~#cp_table~0.base, ~bvadd32(172bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(2bv32, ~#cp_table~0.base, ~bvadd32(176bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(36bv32, ~#cp_table~0.base, ~bvadd32(180bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(131bv32, ~#cp_table~0.base, ~bvadd32(184bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(6bv32, ~#cp_table~0.base, ~bvadd32(188bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(131bv32, ~#cp_table~0.base, ~bvadd32(192bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(2048bv32, ~#cp_table~0.base, ~bvadd32(196bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(2049bv32, ~#cp_table~0.base, ~bvadd32(200bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(2bv32, ~#cp_table~0.base, ~bvadd32(204bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(163bv32, ~#cp_table~0.base, ~bvadd32(208bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(131bv32, ~#cp_table~0.base, ~bvadd32(212bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(165bv32, ~#cp_table~0.base, ~bvadd32(216bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(131bv32, ~#cp_table~0.base, ~bvadd32(220bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(2048bv32, ~#cp_table~0.base, ~bvadd32(224bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(2049bv32, ~#cp_table~0.base, ~bvadd32(228bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(2050bv32, ~#cp_table~0.base, ~bvadd32(232bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(2051bv32, ~#cp_table~0.base, ~bvadd32(236bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(2051bv32, ~#cp_table~0.base, ~bvadd32(240bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(2051bv32, ~#cp_table~0.base, ~bvadd32(244bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(2114bv32, ~#cp_table~0.base, ~bvadd32(248bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(0bv32, ~#cp_table~0.base, ~bvadd32(252bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(1bv32, ~#cp_table~0.base, ~bvadd32(256bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(1bv32, ~#cp_table~0.base, ~bvadd32(260bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(3bv32, ~#cp_table~0.base, ~bvadd32(264bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(3bv32, ~#cp_table~0.base, ~bvadd32(268bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(5bv32, ~#cp_table~0.base, ~bvadd32(272bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(131bv32, ~#cp_table~0.base, ~bvadd32(276bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(4096bv32, ~#cp_table~0.base, ~bvadd32(280bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(4097bv32, ~#cp_table~0.base, ~bvadd32(284bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(4098bv32, ~#cp_table~0.base, ~bvadd32(288bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(4099bv32, ~#cp_table~0.base, ~bvadd32(292bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(4100bv32, ~#cp_table~0.base, ~bvadd32(296bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(4101bv32, ~#cp_table~0.base, ~bvadd32(300bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(4102bv32, ~#cp_table~0.base, ~bvadd32(304bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(0bv32, ~#cp_table~0.base, ~bvadd32(308bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(1bv32, ~#cp_table~0.base, ~bvadd32(312bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(2bv32, ~#cp_table~0.base, ~bvadd32(316bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(3bv32, ~#cp_table~0.base, ~bvadd32(320bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(3bv32, ~#cp_table~0.base, ~bvadd32(324bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(5bv32, ~#cp_table~0.base, ~bvadd32(328bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(6bv32, ~#cp_table~0.base, ~bvadd32(332bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(0bv32, ~#cp_table~0.base, ~bvadd32(336bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(1bv32, ~#cp_table~0.base, ~bvadd32(340bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(1bv32, ~#cp_table~0.base, ~bvadd32(344bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(1bv32, ~#cp_table~0.base, ~bvadd32(348bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(1bv32, ~#cp_table~0.base, ~bvadd32(352bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(1bv32, ~#cp_table~0.base, ~bvadd32(356bv32, ~#cp_table~0.offset), 4bv32); [L5595-L5621] call write~init~intINTTYPE4(1058bv32, ~#cp_table~0.base, ~bvadd32(360bv32, ~#cp_table~0.offset), 4bv32); [L6197] ~ldv_retval_0~0 := 0bv32; [L6679] ~last_index~0 := 0bv32; [L5334] ~proto_group1~0.base, ~proto_group1~0.offset := 0bv32, 0bv32; [L5339] ~proto_group0~0.base, ~proto_group0~0.offset := 0bv32, 0bv32; [L5342] ~ldv_timer_list_1~0.base, ~ldv_timer_list_1~0.offset := 0bv32, 0bv32; [L5410] call ~#tx_queue~0.base, ~#tx_queue~0.offset := #Ultimate.alloc(88bv32); [L5410] call write~init~$Pointer$(0bv32, 0bv32, ~#tx_queue~0.base, ~#tx_queue~0.offset, 8bv32); [L5410] call write~init~$Pointer$(0bv32, 0bv32, ~#tx_queue~0.base, ~bvadd32(8bv32, ~#tx_queue~0.offset), 8bv32); [L5410] call write~init~intINTTYPE4(0bv32, ~#tx_queue~0.base, ~bvadd32(16bv32, ~#tx_queue~0.offset), 4bv32); [L5410] call write~init~intINTTYPE4(0bv32, ~#tx_queue~0.base, ~bvadd32(20bv32, ~#tx_queue~0.offset), 4bv32); [L5410] call write~init~intINTTYPE4(0bv32, ~#tx_queue~0.base, ~bvadd32(24bv32, ~#tx_queue~0.offset), 4bv32); [L5410] call write~init~intINTTYPE4(0bv32, ~#tx_queue~0.base, ~bvadd32(28bv32, ~#tx_queue~0.offset), 4bv32); [L5410] call write~init~$Pointer$(0bv32, 0bv32, ~#tx_queue~0.base, ~bvadd32(32bv32, ~#tx_queue~0.offset), 8bv32); [L5410] call write~init~$Pointer$(0bv32, 0bv32, ~#tx_queue~0.base, ~bvadd32(40bv32, ~#tx_queue~0.offset), 8bv32); [L5410] call write~init~$Pointer$(0bv32, 0bv32, ~#tx_queue~0.base, ~bvadd32(48bv32, ~#tx_queue~0.offset), 8bv32); [L5410] call write~init~$Pointer$(0bv32, 0bv32, ~#tx_queue~0.base, ~bvadd32(56bv32, ~#tx_queue~0.offset), 8bv32); [L5410] call write~init~$Pointer$(0bv32, 0bv32, ~#tx_queue~0.base, ~bvadd32(64bv32, ~#tx_queue~0.offset), 8bv32); [L5410] call write~init~intINTTYPE4(0bv32, ~#tx_queue~0.base, ~bvadd32(72bv32, ~#tx_queue~0.offset), 4bv32); [L5410] call write~init~intINTTYPE8(0bv64, ~#tx_queue~0.base, ~bvadd32(76bv32, ~#tx_queue~0.offset), 8bv32); [L6104-L6106] call ~#proto~0.base, ~#proto~0.offset := #Ultimate.alloc(88bv32); [L6104-L6106] call write~init~$Pointer$(0bv32, 0bv32, ~#proto~0.base, ~#proto~0.offset, 8bv32); [L6104-L6106] call write~init~$Pointer$(#funAddr~ppp_close.base, #funAddr~ppp_close.offset, ~#proto~0.base, ~bvadd32(8bv32, ~#proto~0.offset), 8bv32); [L6104-L6106] call write~init~$Pointer$(#funAddr~ppp_start.base, #funAddr~ppp_start.offset, ~#proto~0.base, ~bvadd32(16bv32, ~#proto~0.offset), 8bv32); [L6104-L6106] call write~init~$Pointer$(#funAddr~ppp_stop.base, #funAddr~ppp_stop.offset, ~#proto~0.base, ~bvadd32(24bv32, ~#proto~0.offset), 8bv32); [L6104-L6106] call write~init~$Pointer$(0bv32, 0bv32, ~#proto~0.base, ~bvadd32(32bv32, ~#proto~0.offset), 8bv32); [L6104-L6106] call write~init~$Pointer$(#funAddr~ppp_ioctl.base, #funAddr~ppp_ioctl.offset, ~#proto~0.base, ~bvadd32(40bv32, ~#proto~0.offset), 8bv32); [L6104-L6106] call write~init~$Pointer$(#funAddr~ppp_type_trans.base, #funAddr~ppp_type_trans.offset, ~#proto~0.base, ~bvadd32(48bv32, ~#proto~0.offset), 8bv32); [L6104-L6106] call write~init~$Pointer$(#funAddr~ppp_rx.base, #funAddr~ppp_rx.offset, ~#proto~0.base, ~bvadd32(56bv32, ~#proto~0.offset), 8bv32); [L6104-L6106] call write~init~$Pointer$(0bv32, 0bv32, ~#proto~0.base, ~bvadd32(64bv32, ~#proto~0.offset), 8bv32); [L6104-L6106] call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#proto~0.base, ~bvadd32(72bv32, ~#proto~0.offset), 8bv32); [L6104-L6106] call write~init~$Pointer$(0bv32, 0bv32, ~#proto~0.base, ~bvadd32(80bv32, ~#proto~0.offset), 8bv32); [L6107] call ~#ppp_header_ops~0.base, ~#ppp_header_ops~0.offset := #Ultimate.alloc(40bv32); [L6107] call write~init~$Pointer$(#funAddr~ppp_hard_header.base, #funAddr~ppp_hard_header.offset, ~#ppp_header_ops~0.base, ~#ppp_header_ops~0.offset, 8bv32); [L6107] call write~init~$Pointer$(0bv32, 0bv32, ~#ppp_header_ops~0.base, ~bvadd32(8bv32, ~#ppp_header_ops~0.offset), 8bv32); [L6107] call write~init~$Pointer$(0bv32, 0bv32, ~#ppp_header_ops~0.base, ~bvadd32(16bv32, ~#ppp_header_ops~0.offset), 8bv32); [L6107] call write~init~$Pointer$(0bv32, 0bv32, ~#ppp_header_ops~0.base, ~bvadd32(24bv32, ~#ppp_header_ops~0.offset), 8bv32); [L6107] call write~init~$Pointer$(0bv32, 0bv32, ~#ppp_header_ops~0.base, ~bvadd32(32bv32, ~#ppp_header_ops~0.offset), 8bv32); [L6678] call ~#set_impl~0.base, ~#set_impl~0.offset := #Ultimate.alloc(120bv32); [L6678] call write~init~$Pointer$(0bv32, 0bv32, ~#set_impl~0.base, ~#set_impl~0.offset, 8bv32); [L6678] call write~init~$Pointer$(0bv32, 0bv32, ~#set_impl~0.base, ~bvadd32(8bv32, ~#set_impl~0.offset), 8bv32); [L6678] call write~init~$Pointer$(0bv32, 0bv32, ~#set_impl~0.base, ~bvadd32(16bv32, ~#set_impl~0.offset), 8bv32); [L6678] call write~init~$Pointer$(0bv32, 0bv32, ~#set_impl~0.base, ~bvadd32(24bv32, ~#set_impl~0.offset), 8bv32); [L6678] call write~init~$Pointer$(0bv32, 0bv32, ~#set_impl~0.base, ~bvadd32(32bv32, ~#set_impl~0.offset), 8bv32); [L6678] call write~init~$Pointer$(0bv32, 0bv32, ~#set_impl~0.base, ~bvadd32(40bv32, ~#set_impl~0.offset), 8bv32); [L6678] call write~init~$Pointer$(0bv32, 0bv32, ~#set_impl~0.base, ~bvadd32(48bv32, ~#set_impl~0.offset), 8bv32); [L6678] call write~init~$Pointer$(0bv32, 0bv32, ~#set_impl~0.base, ~bvadd32(56bv32, ~#set_impl~0.offset), 8bv32); [L6678] call write~init~$Pointer$(0bv32, 0bv32, ~#set_impl~0.base, ~bvadd32(64bv32, ~#set_impl~0.offset), 8bv32); [L6678] call write~init~$Pointer$(0bv32, 0bv32, ~#set_impl~0.base, ~bvadd32(72bv32, ~#set_impl~0.offset), 8bv32); [L6678] call write~init~$Pointer$(0bv32, 0bv32, ~#set_impl~0.base, ~bvadd32(80bv32, ~#set_impl~0.offset), 8bv32); [L6678] call write~init~$Pointer$(0bv32, 0bv32, ~#set_impl~0.base, ~bvadd32(88bv32, ~#set_impl~0.offset), 8bv32); [L6678] call write~init~$Pointer$(0bv32, 0bv32, ~#set_impl~0.base, ~bvadd32(96bv32, ~#set_impl~0.offset), 8bv32); [L6678] call write~init~$Pointer$(0bv32, 0bv32, ~#set_impl~0.base, ~bvadd32(104bv32, ~#set_impl~0.offset), 8bv32); [L6678] call write~init~$Pointer$(0bv32, 0bv32, ~#set_impl~0.base, ~bvadd32(112bv32, ~#set_impl~0.offset), 8bv32); [L6836] ~LDV_SKBS~0.base, ~LDV_SKBS~0.offset := 0bv32, 0bv32; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(#t~string114.base)=0bv32, old(#t~string114.offset)=0bv32, old(#t~string121.base)=0bv32, old(#t~string121.offset)=0bv32, old(#t~string211.base)=0bv32, old(#t~string211.offset)=0bv32, old(#t~string22.base)=0bv32, old(#t~string22.offset)=0bv32, old(#t~string237.base)=0bv32, old(#t~string237.offset)=0bv32, old(#t~string64.base)=0bv32, old(#t~string64.offset)=0bv32, old(#t~string65.base)=0bv32, old(#t~string65.offset)=0bv32, old(#t~string66.base)=0bv32, old(#t~string66.offset)=0bv32, old(#t~string84.base)=0bv32, old(#t~string84.offset)=0bv32, old(~#cp_table~0.base)=0bv32, old(~#cp_table~0.offset)=0bv32, old(~#ppp_header_ops~0.base)=0bv32, old(~#ppp_header_ops~0.offset)=0bv32, old(~#proto~0.base)=0bv32, old(~#proto~0.offset)=0bv32, old(~#set_impl~0.base)=0bv32, old(~#set_impl~0.offset)=0bv32, old(~#tx_queue~0.base)=0bv32, old(~#tx_queue~0.offset)=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~ldv_retval_0~0)=0bv32, old(~LDV_SKBS~0.base)=0bv32, old(~LDV_SKBS~0.offset)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32] [?] ensures true; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(#t~string114.base)=0bv32, old(#t~string114.offset)=0bv32, old(#t~string121.base)=0bv32, old(#t~string121.offset)=0bv32, old(#t~string211.base)=0bv32, old(#t~string211.offset)=0bv32, old(#t~string22.base)=0bv32, old(#t~string22.offset)=0bv32, old(#t~string237.base)=0bv32, old(#t~string237.offset)=0bv32, old(#t~string64.base)=0bv32, old(#t~string64.offset)=0bv32, old(#t~string65.base)=0bv32, old(#t~string65.offset)=0bv32, old(#t~string66.base)=0bv32, old(#t~string66.offset)=0bv32, old(#t~string84.base)=0bv32, old(#t~string84.offset)=0bv32, old(~#cp_table~0.base)=0bv32, old(~#cp_table~0.offset)=0bv32, old(~#ppp_header_ops~0.base)=0bv32, old(~#ppp_header_ops~0.offset)=0bv32, old(~#proto~0.base)=0bv32, old(~#proto~0.offset)=0bv32, old(~#set_impl~0.base)=0bv32, old(~#set_impl~0.offset)=0bv32, old(~#tx_queue~0.base)=0bv32, old(~#tx_queue~0.offset)=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~ldv_retval_0~0)=0bv32, old(~LDV_SKBS~0.base)=0bv32, old(~LDV_SKBS~0.offset)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32] [?] CALL call #t~ret298 := main(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32] [L6277] havoc ~ldvarg0~0.base, ~ldvarg0~0.offset; [L6278] havoc ~tmp~20.base, ~tmp~20.offset; [L6279] havoc ~ldvarg1~0; [L6280] havoc ~tmp___0~9; [L6281] havoc ~ldvarg4~0; [L6282] havoc ~tmp___1~3; [L6283] havoc ~ldvarg3~0.base, ~ldvarg3~0.offset; [L6284] havoc ~tmp___2~5.base, ~tmp___2~5.offset; [L6285] havoc ~ldvarg5~0.base, ~ldvarg5~0.offset; [L6286] havoc ~tmp___3~2.base, ~tmp___3~2.offset; [L6287] havoc ~ldvarg2~0.base, ~ldvarg2~0.offset; [L6288] havoc ~tmp___4~3.base, ~tmp___4~3.offset; [L6289] havoc ~ldvarg6~0.base, ~ldvarg6~0.offset; [L6290] havoc ~tmp___5~1.base, ~tmp___5~1.offset; [L6291] havoc ~tmp___6~1; [L6292] havoc ~tmp___7~1; [L6293] havoc ~tmp___8~0; [L6294] havoc ~tmp___9~0; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32] [L6297] CALL call #t~ret245.base, #t~ret245.offset := ldv_zalloc(40bv32); VAL [#in~size=40bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32] [L5253-L5270] ~size := #in~size; [L5255] havoc ~p~1.base, ~p~1.offset; [L5256] havoc ~tmp~2.base, ~tmp~2.offset; [L5257] havoc ~tmp___0~1; [L5260] ~tmp___0~1 := #t~nondet38; [L5260] havoc #t~nondet38; VAL [#in~size=40bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~size=40bv32, ~tmp___0~1=1bv32] [L5261-L5268] assume 0bv32 != ~tmp___0~1; [L5262] #res.base, #res.offset := 0bv32, 0bv32; VAL [#in~size=40bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res.base=0bv32, #res.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~size=40bv32, ~tmp___0~1=1bv32] [L5253-L5270] ensures true; VAL [#in~size=40bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res.base=0bv32, #res.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~size=40bv32, ~tmp___0~1=1bv32] [L6297] RET call #t~ret245.base, #t~ret245.offset := ldv_zalloc(40bv32); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~ret245.base=0bv32, #t~ret245.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32] [L6297] ~tmp~20.base, ~tmp~20.offset := #t~ret245.base, #t~ret245.offset; [L6297] havoc #t~ret245.base, #t~ret245.offset; [L6298] ~ldvarg0~0.base, ~ldvarg0~0.offset := ~tmp~20.base, ~tmp~20.offset; [L6299] ~tmp___0~9 := #t~nondet246; [L6299] havoc #t~nondet246; [L6300] ~ldvarg1~0 := ~tmp___0~9; [L6301] ~tmp___1~3 := #t~nondet247; [L6301] havoc #t~nondet247; [L6302] ~ldvarg4~0 := ~tmp___1~3; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0.base=0bv32, ~ldvarg0~0.offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg4~0=0bv16, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp~20.base=0bv32, ~tmp~20.offset=0bv32] [L6303] CALL call #t~ret248.base, #t~ret248.offset := ldv_zalloc(232bv32); VAL [#in~size=232bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32] [L5253-L5270] ~size := #in~size; [L5255] havoc ~p~1.base, ~p~1.offset; [L5256] havoc ~tmp~2.base, ~tmp~2.offset; [L5257] havoc ~tmp___0~1; [L5260] ~tmp___0~1 := #t~nondet38; [L5260] havoc #t~nondet38; VAL [#in~size=232bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~size=232bv32, ~tmp___0~1=1bv32] [L5261-L5268] assume 0bv32 != ~tmp___0~1; [L5262] #res.base, #res.offset := 0bv32, 0bv32; VAL [#in~size=232bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res.base=0bv32, #res.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~size=232bv32, ~tmp___0~1=1bv32] [L5253-L5270] ensures true; VAL [#in~size=232bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res.base=0bv32, #res.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~size=232bv32, ~tmp___0~1=1bv32] [L6303] RET call #t~ret248.base, #t~ret248.offset := ldv_zalloc(232bv32); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~ret248.base=0bv32, #t~ret248.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0.base=0bv32, ~ldvarg0~0.offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg4~0=0bv16, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp~20.base=0bv32, ~tmp~20.offset=0bv32] [L6303] ~tmp___2~5.base, ~tmp___2~5.offset := #t~ret248.base, #t~ret248.offset; [L6303] havoc #t~ret248.base, #t~ret248.offset; [L6304] ~ldvarg3~0.base, ~ldvarg3~0.offset := ~tmp___2~5.base, ~tmp___2~5.offset; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0.base=0bv32, ~ldvarg0~0.offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg3~0.base=0bv32, ~ldvarg3~0.offset=0bv32, ~ldvarg4~0=0bv16, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5.base=0bv32, ~tmp___2~5.offset=0bv32, ~tmp~20.base=0bv32, ~tmp~20.offset=0bv32] [L6305] CALL call #t~ret249.base, #t~ret249.offset := ldv_zalloc(3264bv32); VAL [#in~size=3264bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32] [L5253-L5270] ~size := #in~size; [L5255] havoc ~p~1.base, ~p~1.offset; [L5256] havoc ~tmp~2.base, ~tmp~2.offset; [L5257] havoc ~tmp___0~1; [L5260] ~tmp___0~1 := #t~nondet38; [L5260] havoc #t~nondet38; VAL [#in~size=3264bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~size=3264bv32, ~tmp___0~1=1bv32] [L5261-L5268] assume 0bv32 != ~tmp___0~1; [L5262] #res.base, #res.offset := 0bv32, 0bv32; VAL [#in~size=3264bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res.base=0bv32, #res.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~size=3264bv32, ~tmp___0~1=1bv32] [L5253-L5270] ensures true; VAL [#in~size=3264bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res.base=0bv32, #res.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~size=3264bv32, ~tmp___0~1=1bv32] [L6305] RET call #t~ret249.base, #t~ret249.offset := ldv_zalloc(3264bv32); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~ret249.base=0bv32, #t~ret249.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0.base=0bv32, ~ldvarg0~0.offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg3~0.base=0bv32, ~ldvarg3~0.offset=0bv32, ~ldvarg4~0=0bv16, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5.base=0bv32, ~tmp___2~5.offset=0bv32, ~tmp~20.base=0bv32, ~tmp~20.offset=0bv32] [L6305] ~tmp___3~2.base, ~tmp___3~2.offset := #t~ret249.base, #t~ret249.offset; [L6305] havoc #t~ret249.base, #t~ret249.offset; [L6306] ~ldvarg5~0.base, ~ldvarg5~0.offset := ~tmp___3~2.base, ~tmp___3~2.offset; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0.base=0bv32, ~ldvarg0~0.offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg3~0.base=0bv32, ~ldvarg3~0.offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0.base=0bv32, ~ldvarg5~0.offset=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5.base=0bv32, ~tmp___2~5.offset=0bv32, ~tmp___3~2.base=0bv32, ~tmp___3~2.offset=0bv32, ~tmp~20.base=0bv32, ~tmp~20.offset=0bv32] [L6307] CALL call #t~ret250.base, #t~ret250.offset := ldv_zalloc(1bv32); VAL [#in~size=1bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32] [L5253-L5270] ~size := #in~size; [L5255] havoc ~p~1.base, ~p~1.offset; [L5256] havoc ~tmp~2.base, ~tmp~2.offset; [L5257] havoc ~tmp___0~1; [L5260] ~tmp___0~1 := #t~nondet38; [L5260] havoc #t~nondet38; VAL [#in~size=1bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~size=1bv32, ~tmp___0~1=1bv32] [L5261-L5268] assume 0bv32 != ~tmp___0~1; [L5262] #res.base, #res.offset := 0bv32, 0bv32; VAL [#in~size=1bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res.base=0bv32, #res.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~size=1bv32, ~tmp___0~1=1bv32] [L5253-L5270] ensures true; VAL [#in~size=1bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res.base=0bv32, #res.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~size=1bv32, ~tmp___0~1=1bv32] [L6307] RET call #t~ret250.base, #t~ret250.offset := ldv_zalloc(1bv32); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~ret250.base=0bv32, #t~ret250.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0.base=0bv32, ~ldvarg0~0.offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg3~0.base=0bv32, ~ldvarg3~0.offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0.base=0bv32, ~ldvarg5~0.offset=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5.base=0bv32, ~tmp___2~5.offset=0bv32, ~tmp___3~2.base=0bv32, ~tmp___3~2.offset=0bv32, ~tmp~20.base=0bv32, ~tmp~20.offset=0bv32] [L6307] ~tmp___4~3.base, ~tmp___4~3.offset := #t~ret250.base, #t~ret250.offset; [L6307] havoc #t~ret250.base, #t~ret250.offset; [L6308] ~ldvarg2~0.base, ~ldvarg2~0.offset := ~tmp___4~3.base, ~tmp___4~3.offset; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0.base=0bv32, ~ldvarg0~0.offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0.base=0bv32, ~ldvarg2~0.offset=0bv32, ~ldvarg3~0.base=0bv32, ~ldvarg3~0.offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0.base=0bv32, ~ldvarg5~0.offset=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5.base=0bv32, ~tmp___2~5.offset=0bv32, ~tmp___3~2.base=0bv32, ~tmp___3~2.offset=0bv32, ~tmp___4~3.base=0bv32, ~tmp___4~3.offset=0bv32, ~tmp~20.base=0bv32, ~tmp~20.offset=0bv32] [L6309] CALL call #t~ret251.base, #t~ret251.offset := ldv_zalloc(1bv32); VAL [#in~size=1bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32] [L5253-L5270] ~size := #in~size; [L5255] havoc ~p~1.base, ~p~1.offset; [L5256] havoc ~tmp~2.base, ~tmp~2.offset; [L5257] havoc ~tmp___0~1; [L5260] ~tmp___0~1 := #t~nondet38; [L5260] havoc #t~nondet38; VAL [#in~size=1bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~size=1bv32, ~tmp___0~1=1bv32] [L5261-L5268] assume 0bv32 != ~tmp___0~1; [L5262] #res.base, #res.offset := 0bv32, 0bv32; VAL [#in~size=1bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res.base=0bv32, #res.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~size=1bv32, ~tmp___0~1=1bv32] [L5253-L5270] ensures true; VAL [#in~size=1bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res.base=0bv32, #res.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~size=1bv32, ~tmp___0~1=1bv32] [L6309] RET call #t~ret251.base, #t~ret251.offset := ldv_zalloc(1bv32); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~ret251.base=0bv32, #t~ret251.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0.base=0bv32, ~ldvarg0~0.offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0.base=0bv32, ~ldvarg2~0.offset=0bv32, ~ldvarg3~0.base=0bv32, ~ldvarg3~0.offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0.base=0bv32, ~ldvarg5~0.offset=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5.base=0bv32, ~tmp___2~5.offset=0bv32, ~tmp___3~2.base=0bv32, ~tmp___3~2.offset=0bv32, ~tmp___4~3.base=0bv32, ~tmp___4~3.offset=0bv32, ~tmp~20.base=0bv32, ~tmp~20.offset=0bv32] [L6309] ~tmp___5~1.base, ~tmp___5~1.offset := #t~ret251.base, #t~ret251.offset; [L6309] havoc #t~ret251.base, #t~ret251.offset; [L6310] ~ldvarg6~0.base, ~ldvarg6~0.offset := ~tmp___5~1.base, ~tmp___5~1.offset; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0.base=0bv32, ~ldvarg0~0.offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0.base=0bv32, ~ldvarg2~0.offset=0bv32, ~ldvarg3~0.base=0bv32, ~ldvarg3~0.offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0.base=0bv32, ~ldvarg5~0.offset=0bv32, ~ldvarg6~0.base=0bv32, ~ldvarg6~0.offset=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5.base=0bv32, ~tmp___2~5.offset=0bv32, ~tmp___3~2.base=0bv32, ~tmp___3~2.offset=0bv32, ~tmp___4~3.base=0bv32, ~tmp___4~3.offset=0bv32, ~tmp___5~1.base=0bv32, ~tmp___5~1.offset=0bv32, ~tmp~20.base=0bv32, ~tmp~20.offset=0bv32] [L6311] CALL call ldv_initialize(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32] [L6858] CALL call ldv_set_init(~LDV_SKBS~0.base, ~LDV_SKBS~0.offset); VAL [#in~set.base=0bv32, #in~set.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32] [L6681-L6690] ~set.base, ~set.offset := #in~set.base, #in~set.offset; [L6686] ~set.base, ~set.offset := ~#set_impl~0.base, ~#set_impl~0.offset; [L6687] ~last_index~0 := 0bv32; VAL [#in~set.base=0bv32, #in~set.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~set.base=2147483717bv32, ~set.offset=0bv32] [L6680] ensures true; VAL [#in~set.base=0bv32, #in~set.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~set.base=2147483717bv32, ~set.offset=0bv32] [L6858] RET call ldv_set_init(~LDV_SKBS~0.base, ~LDV_SKBS~0.offset); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32] [L6199] ensures true; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32] [L6311] RET call ldv_initialize(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0.base=0bv32, ~ldvarg0~0.offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0.base=0bv32, ~ldvarg2~0.offset=0bv32, ~ldvarg3~0.base=0bv32, ~ldvarg3~0.offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0.base=0bv32, ~ldvarg5~0.offset=0bv32, ~ldvarg6~0.base=0bv32, ~ldvarg6~0.offset=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5.base=0bv32, ~tmp___2~5.offset=0bv32, ~tmp___3~2.base=0bv32, ~tmp___3~2.offset=0bv32, ~tmp___4~3.base=0bv32, ~tmp___4~3.offset=0bv32, ~tmp___5~1.base=0bv32, ~tmp___5~1.offset=0bv32, ~tmp~20.base=0bv32, ~tmp~20.offset=0bv32] [L6312] ~ldv_state_variable_1~0 := 1bv32; [L6313] ~ref_cnt~0 := 0bv32; [L6314] ~ldv_state_variable_0~0 := 1bv32; [L6315] ~ldv_state_variable_3~0 := 0bv32; [L6316] ~ldv_state_variable_2~0 := 0bv32; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0.base=0bv32, ~ldvarg0~0.offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0.base=0bv32, ~ldvarg2~0.offset=0bv32, ~ldvarg3~0.base=0bv32, ~ldvarg3~0.offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0.base=0bv32, ~ldvarg5~0.offset=0bv32, ~ldvarg6~0.base=0bv32, ~ldvarg6~0.offset=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5.base=0bv32, ~tmp___2~5.offset=0bv32, ~tmp___3~2.base=0bv32, ~tmp___3~2.offset=0bv32, ~tmp___4~3.base=0bv32, ~tmp___4~3.offset=0bv32, ~tmp___5~1.base=0bv32, ~tmp___5~1.offset=0bv32, ~tmp~20.base=0bv32, ~tmp~20.offset=0bv32] [L6318] ~tmp___6~1 := #t~nondet252; [L6318] havoc #t~nondet252; [L6320] #t~switch253 := 0bv32 == ~tmp___6~1; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, #t~switch253=false, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0.base=0bv32, ~ldvarg0~0.offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0.base=0bv32, ~ldvarg2~0.offset=0bv32, ~ldvarg3~0.base=0bv32, ~ldvarg3~0.offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0.base=0bv32, ~ldvarg5~0.offset=0bv32, ~ldvarg6~0.base=0bv32, ~ldvarg6~0.offset=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5.base=0bv32, ~tmp___2~5.offset=0bv32, ~tmp___3~2.base=0bv32, ~tmp___3~2.offset=0bv32, ~tmp___4~3.base=0bv32, ~tmp___4~3.offset=0bv32, ~tmp___5~1.base=0bv32, ~tmp___5~1.offset=0bv32, ~tmp___6~1=1bv32, ~tmp~20.base=0bv32, ~tmp~20.offset=0bv32] [L6320] assume !#t~switch253; [L6327] #t~switch253 := #t~switch253 || 1bv32 == ~tmp___6~1; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, #t~switch253=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0.base=0bv32, ~ldvarg0~0.offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0.base=0bv32, ~ldvarg2~0.offset=0bv32, ~ldvarg3~0.base=0bv32, ~ldvarg3~0.offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0.base=0bv32, ~ldvarg5~0.offset=0bv32, ~ldvarg6~0.base=0bv32, ~ldvarg6~0.offset=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5.base=0bv32, ~tmp___2~5.offset=0bv32, ~tmp___3~2.base=0bv32, ~tmp___3~2.offset=0bv32, ~tmp___4~3.base=0bv32, ~tmp___4~3.offset=0bv32, ~tmp___5~1.base=0bv32, ~tmp___5~1.offset=0bv32, ~tmp___6~1=1bv32, ~tmp~20.base=0bv32, ~tmp~20.offset=0bv32] [L6327] assume #t~switch253; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, #t~switch253=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0.base=0bv32, ~ldvarg0~0.offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0.base=0bv32, ~ldvarg2~0.offset=0bv32, ~ldvarg3~0.base=0bv32, ~ldvarg3~0.offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0.base=0bv32, ~ldvarg5~0.offset=0bv32, ~ldvarg6~0.base=0bv32, ~ldvarg6~0.offset=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5.base=0bv32, ~tmp___2~5.offset=0bv32, ~tmp___3~2.base=0bv32, ~tmp___3~2.offset=0bv32, ~tmp___4~3.base=0bv32, ~tmp___4~3.offset=0bv32, ~tmp___5~1.base=0bv32, ~tmp___5~1.offset=0bv32, ~tmp___6~1=1bv32, ~tmp~20.base=0bv32, ~tmp~20.offset=0bv32] [L6328-L6367] assume 0bv32 != ~ldv_state_variable_0~0; [L6329] ~tmp___7~1 := #t~nondet254; [L6329] havoc #t~nondet254; [L6331] #t~switch255 := 0bv32 == ~tmp___7~1; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, #t~switch253=true, #t~switch255=false, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0.base=0bv32, ~ldvarg0~0.offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0.base=0bv32, ~ldvarg2~0.offset=0bv32, ~ldvarg3~0.base=0bv32, ~ldvarg3~0.offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0.base=0bv32, ~ldvarg5~0.offset=0bv32, ~ldvarg6~0.base=0bv32, ~ldvarg6~0.offset=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5.base=0bv32, ~tmp___2~5.offset=0bv32, ~tmp___3~2.base=0bv32, ~tmp___3~2.offset=0bv32, ~tmp___4~3.base=0bv32, ~tmp___4~3.offset=0bv32, ~tmp___5~1.base=0bv32, ~tmp___5~1.offset=0bv32, ~tmp___6~1=1bv32, ~tmp___7~1=1bv32, ~tmp~20.base=0bv32, ~tmp~20.offset=0bv32] [L6331] assume !#t~switch255; [L6340] #t~switch255 := #t~switch255 || 1bv32 == ~tmp___7~1; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, #t~switch253=true, #t~switch255=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0.base=0bv32, ~ldvarg0~0.offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0.base=0bv32, ~ldvarg2~0.offset=0bv32, ~ldvarg3~0.base=0bv32, ~ldvarg3~0.offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0.base=0bv32, ~ldvarg5~0.offset=0bv32, ~ldvarg6~0.base=0bv32, ~ldvarg6~0.offset=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5.base=0bv32, ~tmp___2~5.offset=0bv32, ~tmp___3~2.base=0bv32, ~tmp___3~2.offset=0bv32, ~tmp___4~3.base=0bv32, ~tmp___4~3.offset=0bv32, ~tmp___5~1.base=0bv32, ~tmp___5~1.offset=0bv32, ~tmp___6~1=1bv32, ~tmp___7~1=1bv32, ~tmp~20.base=0bv32, ~tmp~20.offset=0bv32] [L6340] assume #t~switch255; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, #t~switch253=true, #t~switch255=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0.base=0bv32, ~ldvarg0~0.offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0.base=0bv32, ~ldvarg2~0.offset=0bv32, ~ldvarg3~0.base=0bv32, ~ldvarg3~0.offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0.base=0bv32, ~ldvarg5~0.offset=0bv32, ~ldvarg6~0.base=0bv32, ~ldvarg6~0.offset=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5.base=0bv32, ~tmp___2~5.offset=0bv32, ~tmp___3~2.base=0bv32, ~tmp___3~2.offset=0bv32, ~tmp___4~3.base=0bv32, ~tmp___4~3.offset=0bv32, ~tmp___5~1.base=0bv32, ~tmp___5~1.offset=0bv32, ~tmp___6~1=1bv32, ~tmp___7~1=1bv32, ~tmp~20.base=0bv32, ~tmp~20.offset=0bv32] [L6341-L6359] assume 1bv32 == ~ldv_state_variable_0~0; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, #t~switch253=true, #t~switch255=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0.base=0bv32, ~ldvarg0~0.offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0.base=0bv32, ~ldvarg2~0.offset=0bv32, ~ldvarg3~0.base=0bv32, ~ldvarg3~0.offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0.base=0bv32, ~ldvarg5~0.offset=0bv32, ~ldvarg6~0.base=0bv32, ~ldvarg6~0.offset=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5.base=0bv32, ~tmp___2~5.offset=0bv32, ~tmp___3~2.base=0bv32, ~tmp___3~2.offset=0bv32, ~tmp___4~3.base=0bv32, ~tmp___4~3.offset=0bv32, ~tmp___5~1.base=0bv32, ~tmp___5~1.offset=0bv32, ~tmp___6~1=1bv32, ~tmp___7~1=1bv32, ~tmp~20.base=0bv32, ~tmp~20.offset=0bv32] [L6342] CALL call #t~ret256 := mod_init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32] [L6183] CALL call skb_queue_head_init(~#tx_queue~0.base, ~#tx_queue~0.offset); VAL [#in~list.base=2147745877bv32, #in~list.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32] [L5189-L5199] ~list.base, ~list.offset := #in~list.base, #in~list.offset; [L5191] call ~#__key~0.base, ~#__key~0.offset := #Ultimate.alloc(8bv32); VAL [#in~list.base=2147745877bv32, #in~list.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__key~0.base=2818834517bv32, ~#__key~0.offset=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~list.base=2147745877bv32, ~list.offset=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32] [L5194] CALL call #t~ret21.base, #t~ret21.offset := spinlock_check(~list.base, ~bvadd32(20bv32, ~list.offset)); VAL [#in~lock.base=2147745877bv32, #in~lock.offset=20bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32] [L5132-L5139] ~lock.base, ~lock.offset := #in~lock.base, #in~lock.offset; [L5137] #res.base, #res.offset := ~lock.base, ~lock.offset; VAL [#in~lock.base=2147745877bv32, #in~lock.offset=20bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res.base=2147745877bv32, #res.offset=20bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~lock.base=2147745877bv32, ~lock.offset=20bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32] [L5132-L5139] ensures true; VAL [#in~lock.base=2147745877bv32, #in~lock.offset=20bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res.base=2147745877bv32, #res.offset=20bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~lock.base=2147745877bv32, ~lock.offset=20bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32] [L5194] RET call #t~ret21.base, #t~ret21.offset := spinlock_check(~list.base, ~bvadd32(20bv32, ~list.offset)); VAL [#in~list.base=2147745877bv32, #in~list.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~ret21.base=2147745877bv32, #t~ret21.offset=20bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__key~0.base=2818834517bv32, ~#__key~0.offset=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~list.base=2147745877bv32, ~list.offset=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32] [L5194] havoc #t~ret21.base, #t~ret21.offset; [L5195] call __raw_spin_lock_init(~list.base, ~bvadd32(20bv32, ~list.offset), #t~string22.base, #t~string22.offset, ~#__key~0.base, ~#__key~0.offset); VAL [#in~list.base=2147745877bv32, #in~list.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__key~0.base=2818834517bv32, ~#__key~0.offset=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~list.base=2147745877bv32, ~list.offset=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32] [L5196] CALL call __skb_queue_head_init(~list.base, ~list.offset); VAL [#in~list.base=2147745877bv32, #in~list.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32] [L5177-L5188] ~list.base, ~list.offset := #in~list.base, #in~list.offset; [L5179] havoc ~tmp~0.base, ~tmp~0.offset; [L5182] ~tmp~0.base, ~tmp~0.offset := ~list.base, ~list.offset; [L5183] call write~$Pointer$(~tmp~0.base, ~tmp~0.offset, ~list.base, ~list.offset, 8bv32); [L5184] call write~$Pointer$(~tmp~0.base, ~tmp~0.offset, ~list.base, ~bvadd32(8bv32, ~list.offset), 8bv32); [L5185] call write~intINTTYPE4(0bv32, ~list.base, ~bvadd32(16bv32, ~list.offset), 4bv32); VAL [#in~list.base=2147745877bv32, #in~list.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~list.base=2147745877bv32, ~list.offset=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~tmp~0.base=2147745877bv32, ~tmp~0.offset=0bv32] [L5177-L5188] ensures true; VAL [#in~list.base=2147745877bv32, #in~list.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~list.base=2147745877bv32, ~list.offset=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~tmp~0.base=2147745877bv32, ~tmp~0.offset=0bv32] [L5196] RET call __skb_queue_head_init(~list.base, ~list.offset); VAL [#in~list.base=2147745877bv32, #in~list.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__key~0.base=2818834517bv32, ~#__key~0.offset=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~list.base=2147745877bv32, ~list.offset=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32] [L5191] call ULTIMATE.dealloc(~#__key~0.base, ~#__key~0.offset); [L5197] havoc ~#__key~0.base, ~#__key~0.offset; VAL [#in~list.base=2147745877bv32, #in~list.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~list.base=2147745877bv32, ~list.offset=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32] [L5189-L5199] ensures true; VAL [#in~list.base=2147745877bv32, #in~list.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~list.base=2147745877bv32, ~list.offset=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32] [L6183] RET call skb_queue_head_init(~#tx_queue~0.base, ~#tx_queue~0.offset); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32] [L6184] call register_hdlc_protocol(~#proto~0.base, ~#proto~0.offset); [L6185] #res := 0bv32; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #res=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32] [L6178-L6187] ensures true; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #res=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32] [L6342] RET call #t~ret256 := mod_init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~ret256=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, #t~switch253=true, #t~switch255=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0.base=0bv32, ~ldvarg0~0.offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0.base=0bv32, ~ldvarg2~0.offset=0bv32, ~ldvarg3~0.base=0bv32, ~ldvarg3~0.offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0.base=0bv32, ~ldvarg5~0.offset=0bv32, ~ldvarg6~0.base=0bv32, ~ldvarg6~0.offset=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5.base=0bv32, ~tmp___2~5.offset=0bv32, ~tmp___3~2.base=0bv32, ~tmp___3~2.offset=0bv32, ~tmp___4~3.base=0bv32, ~tmp___4~3.offset=0bv32, ~tmp___5~1.base=0bv32, ~tmp___5~1.offset=0bv32, ~tmp___6~1=1bv32, ~tmp___7~1=1bv32, ~tmp~20.base=0bv32, ~tmp~20.offset=0bv32] [L6342] ~ldv_retval_0~0 := #t~ret256; [L6342] havoc #t~ret256; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, #t~switch253=true, #t~switch255=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0.base=0bv32, ~ldvarg0~0.offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0.base=0bv32, ~ldvarg2~0.offset=0bv32, ~ldvarg3~0.base=0bv32, ~ldvarg3~0.offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0.base=0bv32, ~ldvarg5~0.offset=0bv32, ~ldvarg6~0.base=0bv32, ~ldvarg6~0.offset=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5.base=0bv32, ~tmp___2~5.offset=0bv32, ~tmp___3~2.base=0bv32, ~tmp___3~2.offset=0bv32, ~tmp___4~3.base=0bv32, ~tmp___4~3.offset=0bv32, ~tmp___5~1.base=0bv32, ~tmp___5~1.offset=0bv32, ~tmp___6~1=1bv32, ~tmp___7~1=1bv32, ~tmp~20.base=0bv32, ~tmp~20.offset=0bv32] [L6343-L6350] assume 0bv32 == ~ldv_retval_0~0; [L6344] ~ldv_state_variable_0~0 := 3bv32; [L6345] ~ldv_state_variable_2~0 := 1bv32; [L6346] ~ldv_state_variable_3~0 := 1bv32; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, #t~switch253=true, #t~switch255=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0.base=0bv32, ~ldvarg0~0.offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0.base=0bv32, ~ldvarg2~0.offset=0bv32, ~ldvarg3~0.base=0bv32, ~ldvarg3~0.offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0.base=0bv32, ~ldvarg5~0.offset=0bv32, ~ldvarg6~0.base=0bv32, ~ldvarg6~0.offset=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5.base=0bv32, ~tmp___2~5.offset=0bv32, ~tmp___3~2.base=0bv32, ~tmp___3~2.offset=0bv32, ~tmp___4~3.base=0bv32, ~tmp___4~3.offset=0bv32, ~tmp___5~1.base=0bv32, ~tmp___5~1.offset=0bv32, ~tmp___6~1=1bv32, ~tmp___7~1=1bv32, ~tmp~20.base=0bv32, ~tmp~20.offset=0bv32] [L6347] CALL call ldv_initialize_hdlc_proto_3(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string114.base=2147483653bv32, #t~string114.offset=0bv32, #t~string121.base=2147483718bv32, #t~string121.offset=0bv32, #t~string211.base=2147745863bv32, #t~string211.offset=0bv32, #t~string22.base=2415919172bv32, #t~string22.offset=0bv32, #t~string237.base=2147745860bv32, #t~string237.offset=0bv32, #t~string64.base=2147745862bv32, #t~string64.offset=0bv32, #t~string65.base=2147745861bv32, #t~string65.offset=0bv32, #t~string66.base=2147745909bv32, #t~string66.offset=0bv32, #t~string84.base=2147754069bv32, #t~string84.offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0.base)=0bv32, old(~ldv_timer_list_1~0.offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0.base)=0bv32, old(~proto_group0~0.offset)=0bv32, old(~proto_group1~0.base)=0bv32, old(~proto_group1~0.offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#cp_table~0.base=2684616789bv32, ~#cp_table~0.offset=0bv32, ~#ppp_header_ops~0.base=2147745876bv32, ~#ppp_header_ops~0.offset=0bv32, ~#proto~0.base=2147745857bv32, ~#proto~0.offset=0bv32, ~#set_impl~0.base=2147483717bv32, ~#set_impl~0.offset=0bv32, ~#tx_queue~0.base=2147745877bv32, ~#tx_queue~0.offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0.base=0bv32, ~LDV_SKBS~0.offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0.base=0bv32, ~ldv_timer_list_1~0.offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0.base=0bv32, ~proto_group0~0.offset=0bv32, ~proto_group1~0.base=0bv32, ~proto_group1~0.offset=0bv32, ~ref_cnt~0=0bv32] WARNING: YOUR LOGFILE WAS TOO LONG, SOME LINES IN THE MIDDLE WERE REMOVED. [2018-11-23 13:41:03,195 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff [2018-11-23 13:41:03,195 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device [2018-11-23 13:41:03,195 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-23 13:41:03,195 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list [2018-11-23 13:41:03,195 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff [2018-11-23 13:41:03,195 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-23 13:41:03,413 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device [2018-11-23 13:41:03,413 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list [2018-11-23 13:41:03,414 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-23 13:41:03,414 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff [2018-11-23 13:41:03,414 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device [2018-11-23 13:41:03,414 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-23 13:41:03,414 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff [2018-11-23 13:41:03,414 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list [2018-11-23 13:41:03,414 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device [2018-11-23 13:41:03,414 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list [2018-11-23 13:41:03,415 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device [2018-11-23 13:41:03,415 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff [2018-11-23 13:41:03,415 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list [2018-11-23 13:41:03,415 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device [2018-11-23 13:41:03,415 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff [2018-11-23 13:41:03,415 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list [2018-11-23 13:41:03,415 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device [2018-11-23 13:41:03,415 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list [2018-11-23 13:41:03,415 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff [2018-11-23 13:41:03,416 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list [2018-11-23 13:41:03,416 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device [2018-11-23 13:41:03,416 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff [2018-11-23 13:41:03,416 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list [2018-11-23 13:41:03,645 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff [2018-11-23 13:41:03,645 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list [2018-11-23 13:41:03,645 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device [2018-11-23 13:41:03,646 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device [2018-11-23 13:41:03,646 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff [2018-11-23 13:41:03,646 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device [2018-11-23 13:41:03,646 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list [2018-11-23 13:41:03,646 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff [2018-11-23 13:41:03,646 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list [2018-11-23 13:41:03,646 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff [2018-11-23 13:41:03,646 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device [2018-11-23 13:41:03,647 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list [2018-11-23 13:41:03,647 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device [2018-11-23 13:41:03,647 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list [2018-11-23 13:41:03,647 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff [2018-11-23 13:41:03,647 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device [2018-11-23 13:41:03,647 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff [2018-11-23 13:41:03,647 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list [2018-11-23 13:41:03,648 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff [2018-11-23 13:41:03,648 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list [2018-11-23 13:41:03,648 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device [2018-11-23 13:41:03,648 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device [2018-11-23 13:41:03,648 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff [2018-11-23 13:41:03,648 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device [2018-11-23 13:41:03,876 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list [2018-11-23 13:41:03,876 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff [2018-11-23 13:41:03,876 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff [2018-11-23 13:41:03,876 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device [2018-11-23 13:41:03,876 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list [2018-11-23 13:41:03,877 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device [2018-11-23 13:41:03,877 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list [2018-11-23 13:41:03,877 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff [2018-11-23 13:41:03,877 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list [2018-11-23 13:41:03,877 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device [2018-11-23 13:41:03,877 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=0bv32, #t~string114!offset=0bv32, #t~string121!base=0bv32, #t~string121!offset=0bv32, #t~string211!base=0bv32, #t~string211!offset=0bv32, #t~string22!base=0bv32, #t~string22!offset=0bv32, #t~string237!base=0bv32, #t~string237!offset=0bv32, #t~string64!base=0bv32, #t~string64!offset=0bv32, #t~string65!base=0bv32, #t~string65!offset=0bv32, #t~string66!base=0bv32, #t~string66!offset=0bv32, #t~string84!base=0bv32, #t~string84!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(#t~string114!base)=0bv32, old(#t~string114!offset)=0bv32, old(#t~string121!base)=0bv32, old(#t~string121!offset)=0bv32, old(#t~string211!base)=0bv32, old(#t~string211!offset)=0bv32, old(#t~string22!base)=0bv32, old(#t~string22!offset)=0bv32, old(#t~string237!base)=0bv32, old(#t~string237!offset)=0bv32, old(#t~string64!base)=0bv32, old(#t~string64!offset)=0bv32, old(#t~string65!base)=0bv32, old(#t~string65!offset)=0bv32, old(#t~string66!base)=0bv32, old(#t~string66!offset)=0bv32, old(#t~string84!base)=0bv32, old(#t~string84!offset)=0bv32, old(~#cp_table~0!base)=0bv32, old(~#cp_table~0!offset)=0bv32, old(~#ppp_header_ops~0!base)=0bv32, old(~#ppp_header_ops~0!offset)=0bv32, old(~#proto~0!base)=0bv32, old(~#proto~0!offset)=0bv32, old(~#set_impl~0!base)=0bv32, old(~#set_impl~0!offset)=0bv32, old(~#tx_queue~0!base)=0bv32, old(~#tx_queue~0!offset)=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~ldv_retval_0~0)=0bv32, old(~LDV_SKBS~0!base)=0bv32, old(~LDV_SKBS~0!offset)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#cp_table~0!base=0bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=0bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=0bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=0bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=0bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=0bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [?] #NULL := { base: 0bv32, offset: 0bv32 }; [?] #valid[0bv32] := 0bv1; [L5195] FCALL call #t~string22 := #Ultimate.alloc(22bv32); [L5448] FCALL call #t~string64 := #Ultimate.alloc(4bv32); [L5448] FCALL call write~init~intINTTYPE1(76bv8, { base: #t~string64!base, offset: #t~string64!offset }, 1bv32); [L5448] FCALL call write~init~intINTTYPE1(67bv8, { base: #t~string64!base, offset: ~bvadd32(1bv32, #t~string64!offset) }, 1bv32); [L5448] FCALL call write~init~intINTTYPE1(80bv8, { base: #t~string64!base, offset: ~bvadd32(2bv32, #t~string64!offset) }, 1bv32); [L5448] FCALL call write~init~intINTTYPE1(0bv8, { base: #t~string64!base, offset: ~bvadd32(3bv32, #t~string64!offset) }, 1bv32); [L5450] FCALL call #t~string65 := #Ultimate.alloc(5bv32); [L5450] FCALL call write~init~intINTTYPE1(73bv8, { base: #t~string65!base, offset: #t~string65!offset }, 1bv32); [L5450] FCALL call write~init~intINTTYPE1(80bv8, { base: #t~string65!base, offset: ~bvadd32(1bv32, #t~string65!offset) }, 1bv32); [L5450] FCALL call write~init~intINTTYPE1(67bv8, { base: #t~string65!base, offset: ~bvadd32(2bv32, #t~string65!offset) }, 1bv32); [L5450] FCALL call write~init~intINTTYPE1(80bv8, { base: #t~string65!base, offset: ~bvadd32(3bv32, #t~string65!offset) }, 1bv32); [L5450] FCALL call write~init~intINTTYPE1(0bv8, { base: #t~string65!base, offset: ~bvadd32(4bv32, #t~string65!offset) }, 1bv32); [L5452] FCALL call #t~string66 := #Ultimate.alloc(7bv32); [L5452] FCALL call write~init~intINTTYPE1(73bv8, { base: #t~string66!base, offset: #t~string66!offset }, 1bv32); [L5452] FCALL call write~init~intINTTYPE1(80bv8, { base: #t~string66!base, offset: ~bvadd32(1bv32, #t~string66!offset) }, 1bv32); [L5452] FCALL call write~init~intINTTYPE1(86bv8, { base: #t~string66!base, offset: ~bvadd32(2bv32, #t~string66!offset) }, 1bv32); [L5452] FCALL call write~init~intINTTYPE1(54bv8, { base: #t~string66!base, offset: ~bvadd32(3bv32, #t~string66!offset) }, 1bv32); [L5452] FCALL call write~init~intINTTYPE1(67bv8, { base: #t~string66!base, offset: ~bvadd32(4bv32, #t~string66!offset) }, 1bv32); [L5452] FCALL call write~init~intINTTYPE1(80bv8, { base: #t~string66!base, offset: ~bvadd32(5bv32, #t~string66!offset) }, 1bv32); [L5452] FCALL call write~init~intINTTYPE1(0bv8, { base: #t~string66!base, offset: ~bvadd32(6bv32, #t~string66!offset) }, 1bv32); [L5561] FCALL call #t~string84 := #Ultimate.alloc(30bv32); [L5719] FCALL call #t~string114 := #Ultimate.alloc(7bv32); [L5719] FCALL call write~init~intINTTYPE1(37bv8, { base: #t~string114!base, offset: #t~string114!offset }, 1bv32); [L5719] FCALL call write~init~intINTTYPE1(115bv8, { base: #t~string114!base, offset: ~bvadd32(1bv32, #t~string114!offset) }, 1bv32); [L5719] FCALL call write~init~intINTTYPE1(32bv8, { base: #t~string114!base, offset: ~bvadd32(2bv32, #t~string114!offset) }, 1bv32); [L5719] FCALL call write~init~intINTTYPE1(117bv8, { base: #t~string114!base, offset: ~bvadd32(3bv32, #t~string114!offset) }, 1bv32); [L5719] FCALL call write~init~intINTTYPE1(112bv8, { base: #t~string114!base, offset: ~bvadd32(4bv32, #t~string114!offset) }, 1bv32); [L5719] FCALL call write~init~intINTTYPE1(10bv8, { base: #t~string114!base, offset: ~bvadd32(5bv32, #t~string114!offset) }, 1bv32); [L5719] FCALL call write~init~intINTTYPE1(0bv8, { base: #t~string114!base, offset: ~bvadd32(6bv32, #t~string114!offset) }, 1bv32); [L5736] FCALL call #t~string121 := #Ultimate.alloc(9bv32); [L6035] FCALL call #t~string211 := #Ultimate.alloc(11bv32); [L6163] FCALL call #t~string237 := #Ultimate.alloc(21bv32); [L5333] ~LDV_IN_INTERRUPT~0 := 1bv32; [L5335] ~ldv_state_variable_0~0 := 0bv32; [L5336] ~ldv_state_variable_3~0 := 0bv32; [L5337] ~ldv_timer_state_1~0 := 0bv32; [L5338] ~ldv_state_variable_2~0 := 0bv32; [L5340] ~ref_cnt~0 := 0bv32; [L5341] ~ldv_state_variable_1~0 := 0bv32; [L5595-L5621] FCALL call ~#cp_table~0 := #Ultimate.alloc(364bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(163bv32, { base: ~#cp_table~0!base, offset: ~#cp_table~0!offset }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(16bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(4bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(16bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(8bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(16bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(12bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(16bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(16bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(16bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(20bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(16bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(24bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(16bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(28bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(32bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(36bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(40bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(44bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(48bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(52bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(16bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(56bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(16bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(60bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(1026bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(64bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(131bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(68bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(131bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(72bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(133bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(76bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(16bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(80bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(16bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(84bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(16bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(88bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(1bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(92bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(1bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(96bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(1bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(100bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(1bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(104bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(16bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(108bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(2048bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(112bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(421bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(116bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(2bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(120bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(261bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(124bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(262bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(128bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(261bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(132bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(389bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(136bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(2048bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(140bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(675bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(144bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(2bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(148bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(515bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(152bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(516bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(156bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(515bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(160bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(643bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(164bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(2048bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(168bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(2049bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(172bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(2bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(176bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(36bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(180bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(131bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(184bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(6bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(188bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(131bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(192bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(2048bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(196bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(2049bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(200bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(2bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(204bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(163bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(208bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(131bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(212bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(165bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(216bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(131bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(220bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(2048bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(224bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(2049bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(228bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(2050bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(232bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(2051bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(236bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(2051bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(240bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(2051bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(244bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(2114bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(248bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(252bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(1bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(256bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(1bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(260bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(3bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(264bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(3bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(268bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(5bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(272bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(131bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(276bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(4096bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(280bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(4097bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(284bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(4098bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(288bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(4099bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(292bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(4100bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(296bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(4101bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(300bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(4102bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(304bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(308bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(1bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(312bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(2bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(316bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(3bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(320bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(3bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(324bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(5bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(328bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(6bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(332bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(336bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(1bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(340bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(1bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(344bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(1bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(348bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(1bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(352bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(1bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(356bv32, ~#cp_table~0!offset) }, 4bv32); [L5595-L5621] FCALL call write~init~intINTTYPE4(1058bv32, { base: ~#cp_table~0!base, offset: ~bvadd32(360bv32, ~#cp_table~0!offset) }, 4bv32); [L6197] ~ldv_retval_0~0 := 0bv32; [L6679] ~last_index~0 := 0bv32; [L5334] ~proto_group1~0 := { base: 0bv32, offset: 0bv32 }; [L5339] ~proto_group0~0 := { base: 0bv32, offset: 0bv32 }; [L5342] ~ldv_timer_list_1~0 := { base: 0bv32, offset: 0bv32 }; [L5410] FCALL call ~#tx_queue~0 := #Ultimate.alloc(88bv32); [L5410] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#tx_queue~0!base, offset: ~#tx_queue~0!offset }, 8bv32); [L5410] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#tx_queue~0!base, offset: ~bvadd32(8bv32, ~#tx_queue~0!offset) }, 8bv32); [L5410] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#tx_queue~0!base, offset: ~bvadd32(16bv32, ~#tx_queue~0!offset) }, 4bv32); [L5410] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#tx_queue~0!base, offset: ~bvadd32(20bv32, ~#tx_queue~0!offset) }, 4bv32); [L5410] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#tx_queue~0!base, offset: ~bvadd32(24bv32, ~#tx_queue~0!offset) }, 4bv32); [L5410] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#tx_queue~0!base, offset: ~bvadd32(28bv32, ~#tx_queue~0!offset) }, 4bv32); [L5410] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#tx_queue~0!base, offset: ~bvadd32(32bv32, ~#tx_queue~0!offset) }, 8bv32); [L5410] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#tx_queue~0!base, offset: ~bvadd32(40bv32, ~#tx_queue~0!offset) }, 8bv32); [L5410] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#tx_queue~0!base, offset: ~bvadd32(48bv32, ~#tx_queue~0!offset) }, 8bv32); [L5410] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#tx_queue~0!base, offset: ~bvadd32(56bv32, ~#tx_queue~0!offset) }, 8bv32); [L5410] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#tx_queue~0!base, offset: ~bvadd32(64bv32, ~#tx_queue~0!offset) }, 8bv32); [L5410] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#tx_queue~0!base, offset: ~bvadd32(72bv32, ~#tx_queue~0!offset) }, 4bv32); [L5410] FCALL call write~init~intINTTYPE8(0bv64, { base: ~#tx_queue~0!base, offset: ~bvadd32(76bv32, ~#tx_queue~0!offset) }, 8bv32); [L6104-L6106] FCALL call ~#proto~0 := #Ultimate.alloc(88bv32); [L6104-L6106] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#proto~0!base, offset: ~#proto~0!offset }, 8bv32); [L6104-L6106] FCALL call write~init~$Pointer$(#funAddr~ppp_close, { base: ~#proto~0!base, offset: ~bvadd32(8bv32, ~#proto~0!offset) }, 8bv32); [L6104-L6106] FCALL call write~init~$Pointer$(#funAddr~ppp_start, { base: ~#proto~0!base, offset: ~bvadd32(16bv32, ~#proto~0!offset) }, 8bv32); [L6104-L6106] FCALL call write~init~$Pointer$(#funAddr~ppp_stop, { base: ~#proto~0!base, offset: ~bvadd32(24bv32, ~#proto~0!offset) }, 8bv32); [L6104-L6106] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#proto~0!base, offset: ~bvadd32(32bv32, ~#proto~0!offset) }, 8bv32); [L6104-L6106] FCALL call write~init~$Pointer$(#funAddr~ppp_ioctl, { base: ~#proto~0!base, offset: ~bvadd32(40bv32, ~#proto~0!offset) }, 8bv32); [L6104-L6106] FCALL call write~init~$Pointer$(#funAddr~ppp_type_trans, { base: ~#proto~0!base, offset: ~bvadd32(48bv32, ~#proto~0!offset) }, 8bv32); [L6104-L6106] FCALL call write~init~$Pointer$(#funAddr~ppp_rx, { base: ~#proto~0!base, offset: ~bvadd32(56bv32, ~#proto~0!offset) }, 8bv32); [L6104-L6106] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#proto~0!base, offset: ~bvadd32(64bv32, ~#proto~0!offset) }, 8bv32); [L6104-L6106] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#proto~0!base, offset: ~bvadd32(72bv32, ~#proto~0!offset) }, 8bv32); [L6104-L6106] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#proto~0!base, offset: ~bvadd32(80bv32, ~#proto~0!offset) }, 8bv32); [L6107] FCALL call ~#ppp_header_ops~0 := #Ultimate.alloc(40bv32); [L6107] FCALL call write~init~$Pointer$(#funAddr~ppp_hard_header, { base: ~#ppp_header_ops~0!base, offset: ~#ppp_header_ops~0!offset }, 8bv32); [L6107] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#ppp_header_ops~0!base, offset: ~bvadd32(8bv32, ~#ppp_header_ops~0!offset) }, 8bv32); [L6107] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#ppp_header_ops~0!base, offset: ~bvadd32(16bv32, ~#ppp_header_ops~0!offset) }, 8bv32); [L6107] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#ppp_header_ops~0!base, offset: ~bvadd32(24bv32, ~#ppp_header_ops~0!offset) }, 8bv32); [L6107] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#ppp_header_ops~0!base, offset: ~bvadd32(32bv32, ~#ppp_header_ops~0!offset) }, 8bv32); [L6678] FCALL call ~#set_impl~0 := #Ultimate.alloc(120bv32); [L6678] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#set_impl~0!base, offset: ~#set_impl~0!offset }, 8bv32); [L6678] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#set_impl~0!base, offset: ~bvadd32(8bv32, ~#set_impl~0!offset) }, 8bv32); [L6678] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#set_impl~0!base, offset: ~bvadd32(16bv32, ~#set_impl~0!offset) }, 8bv32); [L6678] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#set_impl~0!base, offset: ~bvadd32(24bv32, ~#set_impl~0!offset) }, 8bv32); [L6678] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#set_impl~0!base, offset: ~bvadd32(32bv32, ~#set_impl~0!offset) }, 8bv32); [L6678] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#set_impl~0!base, offset: ~bvadd32(40bv32, ~#set_impl~0!offset) }, 8bv32); [L6678] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#set_impl~0!base, offset: ~bvadd32(48bv32, ~#set_impl~0!offset) }, 8bv32); [L6678] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#set_impl~0!base, offset: ~bvadd32(56bv32, ~#set_impl~0!offset) }, 8bv32); [L6678] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#set_impl~0!base, offset: ~bvadd32(64bv32, ~#set_impl~0!offset) }, 8bv32); [L6678] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#set_impl~0!base, offset: ~bvadd32(72bv32, ~#set_impl~0!offset) }, 8bv32); [L6678] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#set_impl~0!base, offset: ~bvadd32(80bv32, ~#set_impl~0!offset) }, 8bv32); [L6678] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#set_impl~0!base, offset: ~bvadd32(88bv32, ~#set_impl~0!offset) }, 8bv32); [L6678] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#set_impl~0!base, offset: ~bvadd32(96bv32, ~#set_impl~0!offset) }, 8bv32); [L6678] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#set_impl~0!base, offset: ~bvadd32(104bv32, ~#set_impl~0!offset) }, 8bv32); [L6678] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#set_impl~0!base, offset: ~bvadd32(112bv32, ~#set_impl~0!offset) }, 8bv32); [L6836] ~LDV_SKBS~0 := { base: 0bv32, offset: 0bv32 }; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(#t~string114!base)=0bv32, old(#t~string114!offset)=0bv32, old(#t~string121!base)=0bv32, old(#t~string121!offset)=0bv32, old(#t~string211!base)=0bv32, old(#t~string211!offset)=0bv32, old(#t~string22!base)=0bv32, old(#t~string22!offset)=0bv32, old(#t~string237!base)=0bv32, old(#t~string237!offset)=0bv32, old(#t~string64!base)=0bv32, old(#t~string64!offset)=0bv32, old(#t~string65!base)=0bv32, old(#t~string65!offset)=0bv32, old(#t~string66!base)=0bv32, old(#t~string66!offset)=0bv32, old(#t~string84!base)=0bv32, old(#t~string84!offset)=0bv32, old(~#cp_table~0!base)=0bv32, old(~#cp_table~0!offset)=0bv32, old(~#ppp_header_ops~0!base)=0bv32, old(~#ppp_header_ops~0!offset)=0bv32, old(~#proto~0!base)=0bv32, old(~#proto~0!offset)=0bv32, old(~#set_impl~0!base)=0bv32, old(~#set_impl~0!offset)=0bv32, old(~#tx_queue~0!base)=0bv32, old(~#tx_queue~0!offset)=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~ldv_retval_0~0)=0bv32, old(~LDV_SKBS~0!base)=0bv32, old(~LDV_SKBS~0!offset)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [?] CALL call #t~ret298 := main(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6277] havoc ~ldvarg0~0; [L6278] havoc ~tmp~20; [L6279] havoc ~ldvarg1~0; [L6280] havoc ~tmp___0~9; [L6281] havoc ~ldvarg4~0; [L6282] havoc ~tmp___1~3; [L6283] havoc ~ldvarg3~0; [L6284] havoc ~tmp___2~5; [L6285] havoc ~ldvarg5~0; [L6286] havoc ~tmp___3~2; [L6287] havoc ~ldvarg2~0; [L6288] havoc ~tmp___4~3; [L6289] havoc ~ldvarg6~0; [L6290] havoc ~tmp___5~1; [L6291] havoc ~tmp___6~1; [L6292] havoc ~tmp___7~1; [L6293] havoc ~tmp___8~0; [L6294] havoc ~tmp___9~0; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6297] CALL call #t~ret245 := ldv_zalloc(40bv32); VAL [#in~size=40bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L5253-L5270] ~size := #in~size; [L5255] havoc ~p~1; [L5256] havoc ~tmp~2; [L5257] havoc ~tmp___0~1; [L5260] ~tmp___0~1 := #t~nondet38; [L5260] havoc #t~nondet38; VAL [#in~size=40bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~size=40bv32, ~tmp___0~1=1bv32] [L5261] COND TRUE 0bv32 != ~tmp___0~1 [L5262] #res := { base: 0bv32, offset: 0bv32 }; VAL [#in~size=40bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res!base=0bv32, #res!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~size=40bv32, ~tmp___0~1=1bv32] [L6297] RET call #t~ret245 := ldv_zalloc(40bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~ret245!base=0bv32, #t~ret245!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6297] ~tmp~20 := #t~ret245; [L6297] havoc #t~ret245; [L6298] ~ldvarg0~0 := ~tmp~20; [L6299] ~tmp___0~9 := #t~nondet246; [L6299] havoc #t~nondet246; [L6300] ~ldvarg1~0 := ~tmp___0~9; [L6301] ~tmp___1~3 := #t~nondet247; [L6301] havoc #t~nondet247; [L6302] ~ldvarg4~0 := ~tmp___1~3; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg4~0=0bv16, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6303] CALL call #t~ret248 := ldv_zalloc(232bv32); VAL [#in~size=232bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L5253-L5270] ~size := #in~size; [L5255] havoc ~p~1; [L5256] havoc ~tmp~2; [L5257] havoc ~tmp___0~1; [L5260] ~tmp___0~1 := #t~nondet38; [L5260] havoc #t~nondet38; VAL [#in~size=232bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~size=232bv32, ~tmp___0~1=1bv32] [L5261] COND TRUE 0bv32 != ~tmp___0~1 [L5262] #res := { base: 0bv32, offset: 0bv32 }; VAL [#in~size=232bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res!base=0bv32, #res!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~size=232bv32, ~tmp___0~1=1bv32] [L6303] RET call #t~ret248 := ldv_zalloc(232bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~ret248!base=0bv32, #t~ret248!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg4~0=0bv16, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6303] ~tmp___2~5 := #t~ret248; [L6303] havoc #t~ret248; [L6304] ~ldvarg3~0 := ~tmp___2~5; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg3~0!base=0bv32, ~ldvarg3~0!offset=0bv32, ~ldvarg4~0=0bv16, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5!base=0bv32, ~tmp___2~5!offset=0bv32, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6305] CALL call #t~ret249 := ldv_zalloc(3264bv32); VAL [#in~size=3264bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L5253-L5270] ~size := #in~size; [L5255] havoc ~p~1; [L5256] havoc ~tmp~2; [L5257] havoc ~tmp___0~1; [L5260] ~tmp___0~1 := #t~nondet38; [L5260] havoc #t~nondet38; VAL [#in~size=3264bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~size=3264bv32, ~tmp___0~1=1bv32] [L5261] COND TRUE 0bv32 != ~tmp___0~1 [L5262] #res := { base: 0bv32, offset: 0bv32 }; VAL [#in~size=3264bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res!base=0bv32, #res!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~size=3264bv32, ~tmp___0~1=1bv32] [L6305] RET call #t~ret249 := ldv_zalloc(3264bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~ret249!base=0bv32, #t~ret249!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg3~0!base=0bv32, ~ldvarg3~0!offset=0bv32, ~ldvarg4~0=0bv16, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5!base=0bv32, ~tmp___2~5!offset=0bv32, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6305] ~tmp___3~2 := #t~ret249; [L6305] havoc #t~ret249; [L6306] ~ldvarg5~0 := ~tmp___3~2; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg3~0!base=0bv32, ~ldvarg3~0!offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0!base=0bv32, ~ldvarg5~0!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5!base=0bv32, ~tmp___2~5!offset=0bv32, ~tmp___3~2!base=0bv32, ~tmp___3~2!offset=0bv32, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6307] CALL call #t~ret250 := ldv_zalloc(1bv32); VAL [#in~size=1bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L5253-L5270] ~size := #in~size; [L5255] havoc ~p~1; [L5256] havoc ~tmp~2; [L5257] havoc ~tmp___0~1; [L5260] ~tmp___0~1 := #t~nondet38; [L5260] havoc #t~nondet38; VAL [#in~size=1bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~size=1bv32, ~tmp___0~1=1bv32] [L5261] COND TRUE 0bv32 != ~tmp___0~1 [L5262] #res := { base: 0bv32, offset: 0bv32 }; VAL [#in~size=1bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res!base=0bv32, #res!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~size=1bv32, ~tmp___0~1=1bv32] [L6307] RET call #t~ret250 := ldv_zalloc(1bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~ret250!base=0bv32, #t~ret250!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg3~0!base=0bv32, ~ldvarg3~0!offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0!base=0bv32, ~ldvarg5~0!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5!base=0bv32, ~tmp___2~5!offset=0bv32, ~tmp___3~2!base=0bv32, ~tmp___3~2!offset=0bv32, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6307] ~tmp___4~3 := #t~ret250; [L6307] havoc #t~ret250; [L6308] ~ldvarg2~0 := ~tmp___4~3; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0!base=0bv32, ~ldvarg2~0!offset=0bv32, ~ldvarg3~0!base=0bv32, ~ldvarg3~0!offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0!base=0bv32, ~ldvarg5~0!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5!base=0bv32, ~tmp___2~5!offset=0bv32, ~tmp___3~2!base=0bv32, ~tmp___3~2!offset=0bv32, ~tmp___4~3!base=0bv32, ~tmp___4~3!offset=0bv32, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6309] CALL call #t~ret251 := ldv_zalloc(1bv32); VAL [#in~size=1bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L5253-L5270] ~size := #in~size; [L5255] havoc ~p~1; [L5256] havoc ~tmp~2; [L5257] havoc ~tmp___0~1; [L5260] ~tmp___0~1 := #t~nondet38; [L5260] havoc #t~nondet38; VAL [#in~size=1bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~size=1bv32, ~tmp___0~1=1bv32] [L5261] COND TRUE 0bv32 != ~tmp___0~1 [L5262] #res := { base: 0bv32, offset: 0bv32 }; VAL [#in~size=1bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res!base=0bv32, #res!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~size=1bv32, ~tmp___0~1=1bv32] [L6309] RET call #t~ret251 := ldv_zalloc(1bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~ret251!base=0bv32, #t~ret251!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0!base=0bv32, ~ldvarg2~0!offset=0bv32, ~ldvarg3~0!base=0bv32, ~ldvarg3~0!offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0!base=0bv32, ~ldvarg5~0!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5!base=0bv32, ~tmp___2~5!offset=0bv32, ~tmp___3~2!base=0bv32, ~tmp___3~2!offset=0bv32, ~tmp___4~3!base=0bv32, ~tmp___4~3!offset=0bv32, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6309] ~tmp___5~1 := #t~ret251; [L6309] havoc #t~ret251; [L6310] ~ldvarg6~0 := ~tmp___5~1; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0!base=0bv32, ~ldvarg2~0!offset=0bv32, ~ldvarg3~0!base=0bv32, ~ldvarg3~0!offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0!base=0bv32, ~ldvarg5~0!offset=0bv32, ~ldvarg6~0!base=0bv32, ~ldvarg6~0!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5!base=0bv32, ~tmp___2~5!offset=0bv32, ~tmp___3~2!base=0bv32, ~tmp___3~2!offset=0bv32, ~tmp___4~3!base=0bv32, ~tmp___4~3!offset=0bv32, ~tmp___5~1!base=0bv32, ~tmp___5~1!offset=0bv32, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6311] CALL call ldv_initialize(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6858] CALL call ldv_set_init(~LDV_SKBS~0); VAL [#in~set!base=0bv32, #in~set!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6681-L6690] ~set := #in~set; [L6686] ~set := ~#set_impl~0; [L6687] ~last_index~0 := 0bv32; VAL [#in~set!base=0bv32, #in~set!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~set!base=2147483717bv32, ~set!offset=0bv32] [L6858] RET call ldv_set_init(~LDV_SKBS~0); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6311] RET call ldv_initialize(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=0bv32, ~ldv_state_variable_1~0=0bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0!base=0bv32, ~ldvarg2~0!offset=0bv32, ~ldvarg3~0!base=0bv32, ~ldvarg3~0!offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0!base=0bv32, ~ldvarg5~0!offset=0bv32, ~ldvarg6~0!base=0bv32, ~ldvarg6~0!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5!base=0bv32, ~tmp___2~5!offset=0bv32, ~tmp___3~2!base=0bv32, ~tmp___3~2!offset=0bv32, ~tmp___4~3!base=0bv32, ~tmp___4~3!offset=0bv32, ~tmp___5~1!base=0bv32, ~tmp___5~1!offset=0bv32, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6312] ~ldv_state_variable_1~0 := 1bv32; [L6313] ~ref_cnt~0 := 0bv32; [L6314] ~ldv_state_variable_0~0 := 1bv32; [L6315] ~ldv_state_variable_3~0 := 0bv32; [L6316] ~ldv_state_variable_2~0 := 0bv32; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0!base=0bv32, ~ldvarg2~0!offset=0bv32, ~ldvarg3~0!base=0bv32, ~ldvarg3~0!offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0!base=0bv32, ~ldvarg5~0!offset=0bv32, ~ldvarg6~0!base=0bv32, ~ldvarg6~0!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5!base=0bv32, ~tmp___2~5!offset=0bv32, ~tmp___3~2!base=0bv32, ~tmp___3~2!offset=0bv32, ~tmp___4~3!base=0bv32, ~tmp___4~3!offset=0bv32, ~tmp___5~1!base=0bv32, ~tmp___5~1!offset=0bv32, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6318] ~tmp___6~1 := #t~nondet252; [L6318] havoc #t~nondet252; [L6320] #t~switch253 := 0bv32 == ~tmp___6~1; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch253=false, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0!base=0bv32, ~ldvarg2~0!offset=0bv32, ~ldvarg3~0!base=0bv32, ~ldvarg3~0!offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0!base=0bv32, ~ldvarg5~0!offset=0bv32, ~ldvarg6~0!base=0bv32, ~ldvarg6~0!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5!base=0bv32, ~tmp___2~5!offset=0bv32, ~tmp___3~2!base=0bv32, ~tmp___3~2!offset=0bv32, ~tmp___4~3!base=0bv32, ~tmp___4~3!offset=0bv32, ~tmp___5~1!base=0bv32, ~tmp___5~1!offset=0bv32, ~tmp___6~1=1bv32, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6319-L6570] COND FALSE !(#t~switch253) [L6327] #t~switch253 := #t~switch253 || 1bv32 == ~tmp___6~1; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch253=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0!base=0bv32, ~ldvarg2~0!offset=0bv32, ~ldvarg3~0!base=0bv32, ~ldvarg3~0!offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0!base=0bv32, ~ldvarg5~0!offset=0bv32, ~ldvarg6~0!base=0bv32, ~ldvarg6~0!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5!base=0bv32, ~tmp___2~5!offset=0bv32, ~tmp___3~2!base=0bv32, ~tmp___3~2!offset=0bv32, ~tmp___4~3!base=0bv32, ~tmp___4~3!offset=0bv32, ~tmp___5~1!base=0bv32, ~tmp___5~1!offset=0bv32, ~tmp___6~1=1bv32, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6319-L6570] COND TRUE #t~switch253 VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch253=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0!base=0bv32, ~ldvarg2~0!offset=0bv32, ~ldvarg3~0!base=0bv32, ~ldvarg3~0!offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0!base=0bv32, ~ldvarg5~0!offset=0bv32, ~ldvarg6~0!base=0bv32, ~ldvarg6~0!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5!base=0bv32, ~tmp___2~5!offset=0bv32, ~tmp___3~2!base=0bv32, ~tmp___3~2!offset=0bv32, ~tmp___4~3!base=0bv32, ~tmp___4~3!offset=0bv32, ~tmp___5~1!base=0bv32, ~tmp___5~1!offset=0bv32, ~tmp___6~1=1bv32, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6328] COND TRUE 0bv32 != ~ldv_state_variable_0~0 [L6329] ~tmp___7~1 := #t~nondet254; [L6329] havoc #t~nondet254; [L6331] #t~switch255 := 0bv32 == ~tmp___7~1; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch253=true, #t~switch255=false, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0!base=0bv32, ~ldvarg2~0!offset=0bv32, ~ldvarg3~0!base=0bv32, ~ldvarg3~0!offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0!base=0bv32, ~ldvarg5~0!offset=0bv32, ~ldvarg6~0!base=0bv32, ~ldvarg6~0!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5!base=0bv32, ~tmp___2~5!offset=0bv32, ~tmp___3~2!base=0bv32, ~tmp___3~2!offset=0bv32, ~tmp___4~3!base=0bv32, ~tmp___4~3!offset=0bv32, ~tmp___5~1!base=0bv32, ~tmp___5~1!offset=0bv32, ~tmp___6~1=1bv32, ~tmp___7~1=1bv32, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6330-L6363] COND FALSE !(#t~switch255) [L6340] #t~switch255 := #t~switch255 || 1bv32 == ~tmp___7~1; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch253=true, #t~switch255=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0!base=0bv32, ~ldvarg2~0!offset=0bv32, ~ldvarg3~0!base=0bv32, ~ldvarg3~0!offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0!base=0bv32, ~ldvarg5~0!offset=0bv32, ~ldvarg6~0!base=0bv32, ~ldvarg6~0!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5!base=0bv32, ~tmp___2~5!offset=0bv32, ~tmp___3~2!base=0bv32, ~tmp___3~2!offset=0bv32, ~tmp___4~3!base=0bv32, ~tmp___4~3!offset=0bv32, ~tmp___5~1!base=0bv32, ~tmp___5~1!offset=0bv32, ~tmp___6~1=1bv32, ~tmp___7~1=1bv32, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6330-L6363] COND TRUE #t~switch255 VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch253=true, #t~switch255=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0!base=0bv32, ~ldvarg2~0!offset=0bv32, ~ldvarg3~0!base=0bv32, ~ldvarg3~0!offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0!base=0bv32, ~ldvarg5~0!offset=0bv32, ~ldvarg6~0!base=0bv32, ~ldvarg6~0!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5!base=0bv32, ~tmp___2~5!offset=0bv32, ~tmp___3~2!base=0bv32, ~tmp___3~2!offset=0bv32, ~tmp___4~3!base=0bv32, ~tmp___4~3!offset=0bv32, ~tmp___5~1!base=0bv32, ~tmp___5~1!offset=0bv32, ~tmp___6~1=1bv32, ~tmp___7~1=1bv32, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6341] COND TRUE 1bv32 == ~ldv_state_variable_0~0 VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch253=true, #t~switch255=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0!base=0bv32, ~ldvarg2~0!offset=0bv32, ~ldvarg3~0!base=0bv32, ~ldvarg3~0!offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0!base=0bv32, ~ldvarg5~0!offset=0bv32, ~ldvarg6~0!base=0bv32, ~ldvarg6~0!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5!base=0bv32, ~tmp___2~5!offset=0bv32, ~tmp___3~2!base=0bv32, ~tmp___3~2!offset=0bv32, ~tmp___4~3!base=0bv32, ~tmp___4~3!offset=0bv32, ~tmp___5~1!base=0bv32, ~tmp___5~1!offset=0bv32, ~tmp___6~1=1bv32, ~tmp___7~1=1bv32, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6342] CALL call #t~ret256 := mod_init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6183] CALL call skb_queue_head_init(~#tx_queue~0); VAL [#in~list!base=2147745877bv32, #in~list!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L5189-L5199] ~list := #in~list; [L5191] FCALL call ~#__key~0 := #Ultimate.alloc(8bv32); VAL [#in~list!base=2147745877bv32, #in~list!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__key~0!base=2818834517bv32, ~#__key~0!offset=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~list!base=2147745877bv32, ~list!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L5194] CALL call #t~ret21 := spinlock_check({ base: ~list!base, offset: ~bvadd32(20bv32, ~list!offset) }); VAL [#in~lock!base=2147745877bv32, #in~lock!offset=20bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L5132-L5139] ~lock := #in~lock; [L5137] #res := { base: ~lock!base, offset: ~lock!offset }; VAL [#in~lock!base=2147745877bv32, #in~lock!offset=20bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res!base=2147745877bv32, #res!offset=20bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~lock!base=2147745877bv32, ~lock!offset=20bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L5194] RET call #t~ret21 := spinlock_check({ base: ~list!base, offset: ~bvadd32(20bv32, ~list!offset) }); VAL [#in~list!base=2147745877bv32, #in~list!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~ret21!base=2147745877bv32, #t~ret21!offset=20bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__key~0!base=2818834517bv32, ~#__key~0!offset=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~list!base=2147745877bv32, ~list!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L5194] havoc #t~ret21; [L5195] FCALL call __raw_spin_lock_init({ base: ~list!base, offset: ~bvadd32(20bv32, ~list!offset) }, #t~string22, ~#__key~0); VAL [#in~list!base=2147745877bv32, #in~list!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__key~0!base=2818834517bv32, ~#__key~0!offset=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~list!base=2147745877bv32, ~list!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L5196] CALL call __skb_queue_head_init(~list); VAL [#in~list!base=2147745877bv32, #in~list!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L5177-L5188] ~list := #in~list; [L5179] havoc ~tmp~0; [L5182] ~tmp~0 := ~list; [L5183] FCALL call write~$Pointer$(~tmp~0, { base: ~list!base, offset: ~list!offset }, 8bv32); [L5184] FCALL call write~$Pointer$(~tmp~0, { base: ~list!base, offset: ~bvadd32(8bv32, ~list!offset) }, 8bv32); [L5185] FCALL call write~intINTTYPE4(0bv32, { base: ~list!base, offset: ~bvadd32(16bv32, ~list!offset) }, 4bv32); VAL [#in~list!base=2147745877bv32, #in~list!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~list!base=2147745877bv32, ~list!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp~0!base=2147745877bv32, ~tmp~0!offset=0bv32] [L5196] RET call __skb_queue_head_init(~list); VAL [#in~list!base=2147745877bv32, #in~list!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__key~0!base=2818834517bv32, ~#__key~0!offset=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~list!base=2147745877bv32, ~list!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L5191] FCALL call ULTIMATE.dealloc(~#__key~0); [L5197] havoc ~#__key~0; VAL [#in~list!base=2147745877bv32, #in~list!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~list!base=2147745877bv32, ~list!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6183] RET call skb_queue_head_init(~#tx_queue~0); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6184] FCALL call register_hdlc_protocol(~#proto~0); [L6185] #res := 0bv32; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #res=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6342] RET call #t~ret256 := mod_init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~ret256=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch253=true, #t~switch255=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0!base=0bv32, ~ldvarg2~0!offset=0bv32, ~ldvarg3~0!base=0bv32, ~ldvarg3~0!offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0!base=0bv32, ~ldvarg5~0!offset=0bv32, ~ldvarg6~0!base=0bv32, ~ldvarg6~0!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5!base=0bv32, ~tmp___2~5!offset=0bv32, ~tmp___3~2!base=0bv32, ~tmp___3~2!offset=0bv32, ~tmp___4~3!base=0bv32, ~tmp___4~3!offset=0bv32, ~tmp___5~1!base=0bv32, ~tmp___5~1!offset=0bv32, ~tmp___6~1=1bv32, ~tmp___7~1=1bv32, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6342] ~ldv_retval_0~0 := #t~ret256; [L6342] havoc #t~ret256; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch253=true, #t~switch255=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=1bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=0bv32, ~ldv_state_variable_3~0=0bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0!base=0bv32, ~ldvarg2~0!offset=0bv32, ~ldvarg3~0!base=0bv32, ~ldvarg3~0!offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0!base=0bv32, ~ldvarg5~0!offset=0bv32, ~ldvarg6~0!base=0bv32, ~ldvarg6~0!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5!base=0bv32, ~tmp___2~5!offset=0bv32, ~tmp___3~2!base=0bv32, ~tmp___3~2!offset=0bv32, ~tmp___4~3!base=0bv32, ~tmp___4~3!offset=0bv32, ~tmp___5~1!base=0bv32, ~tmp___5~1!offset=0bv32, ~tmp___6~1=1bv32, ~tmp___7~1=1bv32, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6343] COND TRUE 0bv32 == ~ldv_retval_0~0 [L6344] ~ldv_state_variable_0~0 := 3bv32; [L6345] ~ldv_state_variable_2~0 := 1bv32; [L6346] ~ldv_state_variable_3~0 := 1bv32; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch253=true, #t~switch255=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0!base=0bv32, ~ldvarg2~0!offset=0bv32, ~ldvarg3~0!base=0bv32, ~ldvarg3~0!offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0!base=0bv32, ~ldvarg5~0!offset=0bv32, ~ldvarg6~0!base=0bv32, ~ldvarg6~0!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5!base=0bv32, ~tmp___2~5!offset=0bv32, ~tmp___3~2!base=0bv32, ~tmp___3~2!offset=0bv32, ~tmp___4~3!base=0bv32, ~tmp___4~3!offset=0bv32, ~tmp___5~1!base=0bv32, ~tmp___5~1!offset=0bv32, ~tmp___6~1=1bv32, ~tmp___7~1=1bv32, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6347] CALL call ldv_initialize_hdlc_proto_3(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6228] havoc ~tmp~19; [L6229] havoc ~tmp___0~8; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6232] CALL call #t~ret239 := ldv_zalloc(3264bv32); VAL [#in~size=3264bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L5253-L5270] ~size := #in~size; [L5255] havoc ~p~1; [L5256] havoc ~tmp~2; [L5257] havoc ~tmp___0~1; [L5260] ~tmp___0~1 := #t~nondet38; [L5260] havoc #t~nondet38; VAL [#in~size=3264bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~size=3264bv32, ~tmp___0~1=1bv32] [L5261] COND TRUE 0bv32 != ~tmp___0~1 [L5262] #res := { base: 0bv32, offset: 0bv32 }; VAL [#in~size=3264bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res!base=0bv32, #res!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~size=3264bv32, ~tmp___0~1=1bv32] [L6232] RET call #t~ret239 := ldv_zalloc(3264bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~ret239!base=0bv32, #t~ret239!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6232] ~tmp~19 := #t~ret239; [L6232] havoc #t~ret239; [L6233] ~proto_group1~0 := ~tmp~19; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp~19!base=0bv32, ~tmp~19!offset=0bv32] [L6234] CALL call #t~ret240 := ldv_zalloc(232bv32); VAL [#in~size=232bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L5253-L5270] ~size := #in~size; [L5255] havoc ~p~1; [L5256] havoc ~tmp~2; [L5257] havoc ~tmp___0~1; [L5260] ~tmp___0~1 := #t~nondet38; [L5260] havoc #t~nondet38; VAL [#in~size=232bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~size=232bv32, ~tmp___0~1=1bv32] [L5261] COND TRUE 0bv32 != ~tmp___0~1 [L5262] #res := { base: 0bv32, offset: 0bv32 }; VAL [#in~size=232bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res!base=0bv32, #res!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~size=232bv32, ~tmp___0~1=1bv32] [L6234] RET call #t~ret240 := ldv_zalloc(232bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~ret240!base=0bv32, #t~ret240!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp~19!base=0bv32, ~tmp~19!offset=0bv32] [L6234] ~tmp___0~8 := #t~ret240; [L6234] havoc #t~ret240; [L6235] ~proto_group0~0 := ~tmp___0~8; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~8!base=0bv32, ~tmp___0~8!offset=0bv32, ~tmp~19!base=0bv32, ~tmp~19!offset=0bv32] [L6347] RET call ldv_initialize_hdlc_proto_3(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch253=true, #t~switch255=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0!base=0bv32, ~ldvarg2~0!offset=0bv32, ~ldvarg3~0!base=0bv32, ~ldvarg3~0!offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0!base=0bv32, ~ldvarg5~0!offset=0bv32, ~ldvarg6~0!base=0bv32, ~ldvarg6~0!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5!base=0bv32, ~tmp___2~5!offset=0bv32, ~tmp___3~2!base=0bv32, ~tmp___3~2!offset=0bv32, ~tmp___4~3!base=0bv32, ~tmp___4~3!offset=0bv32, ~tmp___5~1!base=0bv32, ~tmp___5~1!offset=0bv32, ~tmp___6~1=1bv32, ~tmp___7~1=1bv32, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6351] COND FALSE !(0bv32 != ~ldv_retval_0~0) VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch253=true, #t~switch255=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0!base=0bv32, ~ldvarg2~0!offset=0bv32, ~ldvarg3~0!base=0bv32, ~ldvarg3~0!offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0!base=0bv32, ~ldvarg5~0!offset=0bv32, ~ldvarg6~0!base=0bv32, ~ldvarg6~0!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5!base=0bv32, ~tmp___2~5!offset=0bv32, ~tmp___3~2!base=0bv32, ~tmp___3~2!offset=0bv32, ~tmp___4~3!base=0bv32, ~tmp___4~3!offset=0bv32, ~tmp___5~1!base=0bv32, ~tmp___5~1!offset=0bv32, ~tmp___6~1=1bv32, ~tmp___7~1=1bv32, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6318] ~tmp___6~1 := #t~nondet252; [L6318] havoc #t~nondet252; [L6320] #t~switch253 := 0bv32 == ~tmp___6~1; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch253=true, #t~switch255=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0!base=0bv32, ~ldvarg2~0!offset=0bv32, ~ldvarg3~0!base=0bv32, ~ldvarg3~0!offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0!base=0bv32, ~ldvarg5~0!offset=0bv32, ~ldvarg6~0!base=0bv32, ~ldvarg6~0!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5!base=0bv32, ~tmp___2~5!offset=0bv32, ~tmp___3~2!base=0bv32, ~tmp___3~2!offset=0bv32, ~tmp___4~3!base=0bv32, ~tmp___4~3!offset=0bv32, ~tmp___5~1!base=0bv32, ~tmp___5~1!offset=0bv32, ~tmp___6~1=0bv32, ~tmp___7~1=1bv32, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6319-L6570] COND TRUE #t~switch253 VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch253=true, #t~switch255=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0!base=0bv32, ~ldvarg2~0!offset=0bv32, ~ldvarg3~0!base=0bv32, ~ldvarg3~0!offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0!base=0bv32, ~ldvarg5~0!offset=0bv32, ~ldvarg6~0!base=0bv32, ~ldvarg6~0!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5!base=0bv32, ~tmp___2~5!offset=0bv32, ~tmp___3~2!base=0bv32, ~tmp___3~2!offset=0bv32, ~tmp___4~3!base=0bv32, ~tmp___4~3!offset=0bv32, ~tmp___5~1!base=0bv32, ~tmp___5~1!offset=0bv32, ~tmp___6~1=0bv32, ~tmp___7~1=1bv32, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6321] COND TRUE 0bv32 != ~ldv_state_variable_1~0 VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch253=true, #t~switch255=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0!base=0bv32, ~ldvarg2~0!offset=0bv32, ~ldvarg3~0!base=0bv32, ~ldvarg3~0!offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0!base=0bv32, ~ldvarg5~0!offset=0bv32, ~ldvarg6~0!base=0bv32, ~ldvarg6~0!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5!base=0bv32, ~tmp___2~5!offset=0bv32, ~tmp___3~2!base=0bv32, ~tmp___3~2!offset=0bv32, ~tmp___4~3!base=0bv32, ~tmp___4~3!offset=0bv32, ~tmp___5~1!base=0bv32, ~tmp___5~1!offset=0bv32, ~tmp___6~1=0bv32, ~tmp___7~1=1bv32, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6322] CALL call choose_timer_1(~ldv_timer_list_1~0); VAL [#in~timer!base=0bv32, #in~timer!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6239-L6250] ~timer := #in~timer; [L6244] ~LDV_IN_INTERRUPT~0 := 2bv32; [L6245] FCALL call #t~mem243 := read~intINTTYPE8({ base: ~timer!base, offset: ~bvadd32(40bv32, ~timer!offset) }, 8bv32); [L6245] FCALL call #t~mem244 := read~$Pointer$({ base: ~timer!base, offset: ~bvadd32(32bv32, ~timer!offset) }, 8bv32); VAL [#in~timer!base=0bv32, #in~timer!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem243=0bv64, #t~mem244!base=0bv32, #t~mem244!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~timer!base=0bv32, ~timer!offset=0bv32] [L6245] CALL call ##fun~C_ULONG~TO~VOID(#t~mem243, #t~mem244); VAL [#in~#fp!base=0bv32, #in~#fp!offset=0bv32, #in~242=0bv64, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [?] #~242 := #in~242; VAL [#in~#fp!base=0bv32, #in~#fp!offset=0bv32, #in~242=0bv64, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #~242=0bv64, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [?] CALL call ppp_timer(#~242); VAL [#in~arg=0bv64, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6002-L6052] ~arg := #in~arg; [L6004] havoc ~proto___0~2; [L6005] havoc ~ppp~3; [L6006] havoc ~tmp~16; [L6007] havoc ~flags~1; [L6008] havoc ~tmp___0~6; [L6011] ~proto___0~2 := { base: 0bv32, offset: ~arg[32:0] }; [L6012] FCALL call #t~mem194 := read~$Pointer$({ base: ~proto___0~2!base, offset: ~proto___0~2!offset }, 8bv32); VAL [#in~arg=0bv64, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem194!base=2147745877bv32, #t~mem194!offset=4294963932bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~arg=0bv64, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto___0~2!base=0bv32, ~proto___0~2!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6012] CALL call #t~ret195 := get_ppp(#t~mem194); VAL [#in~dev!base=2147745877bv32, #in~dev!offset=4294963932bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L5412-L5420] ~dev := #in~dev; [L5414] havoc ~tmp~9; VAL [#in~dev!base=2147745877bv32, #in~dev!offset=4294963932bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~dev!base=2147745877bv32, ~dev!offset=4294963932bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L5417] CALL call #t~ret59 := dev_to_hdlc(~dev); VAL [#in~dev!base=2147745877bv32, #in~dev!offset=4294963932bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L5400-L5408] ~dev := #in~dev; [L5402] havoc ~tmp~8; VAL [#in~dev!base=2147745877bv32, #in~dev!offset=4294963932bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~dev!base=2147745877bv32, ~dev!offset=4294963932bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L5405] CALL call #t~ret55 := netdev_priv(~dev); VAL [#in~dev!base=2147745877bv32, #in~dev!offset=4294963932bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L5348-L5355] ~dev := #in~dev; [L5353] #res := { base: ~dev!base, offset: ~bvadd32(3264bv32, ~dev!offset) }; VAL [#in~dev!base=2147745877bv32, #in~dev!offset=4294963932bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res!base=2147745877bv32, #res!offset=4294967196bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~dev!base=2147745877bv32, ~dev!offset=4294963932bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L5405] RET call #t~ret55 := netdev_priv(~dev); VAL [#in~dev!base=2147745877bv32, #in~dev!offset=4294963932bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~ret55!base=2147745877bv32, #t~ret55!offset=4294967196bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~dev!base=2147745877bv32, ~dev!offset=4294963932bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L5405] ~tmp~8 := #t~ret55; [L5405] havoc #t~ret55; [L5406] #res := ~tmp~8; VAL [#in~dev!base=2147745877bv32, #in~dev!offset=4294963932bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res!base=2147745877bv32, #res!offset=4294967196bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~dev!base=2147745877bv32, ~dev!offset=4294963932bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp~8!base=2147745877bv32, ~tmp~8!offset=4294967196bv32] [L5417] RET call #t~ret59 := dev_to_hdlc(~dev); VAL [#in~dev!base=2147745877bv32, #in~dev!offset=4294963932bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~ret59!base=2147745877bv32, #t~ret59!offset=4294967196bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~dev!base=2147745877bv32, ~dev!offset=4294963932bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L5417] ~tmp~9 := #t~ret59; [L5417] havoc #t~ret59; [L5418] FCALL call #t~mem60 := read~$Pointer$({ base: ~tmp~9!base, offset: ~bvadd32(100bv32, ~tmp~9!offset) }, 8bv32); [L5418] #res := #t~mem60; [L5418] havoc #t~mem60; VAL [#in~dev!base=2147745877bv32, #in~dev!offset=4294963932bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res!base=2147745877bv32, #res!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~dev!base=2147745877bv32, ~dev!offset=4294963932bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp~9!base=2147745877bv32, ~tmp~9!offset=4294967196bv32] [L6012] RET call #t~ret195 := get_ppp(#t~mem194); VAL [#in~arg=0bv64, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem194!base=2147745877bv32, #t~mem194!offset=4294963932bv32, #t~ret195!base=2147745877bv32, #t~ret195!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~arg=0bv64, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto___0~2!base=0bv32, ~proto___0~2!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6012] ~tmp~16 := #t~ret195; [L6012] havoc #t~mem194; [L6012] havoc #t~ret195; [L6013] ~ppp~3 := ~tmp~16; VAL [#in~arg=0bv64, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~arg=0bv64, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ppp~3!base=2147745877bv32, ~ppp~3!offset=0bv32, ~proto___0~2!base=0bv32, ~proto___0~2!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp~16!base=2147745877bv32, ~tmp~16!offset=0bv32] [L6014] CALL call #t~ret196 := spinlock_check({ base: ~ppp~3!base, offset: ~bvadd32(435bv32, ~ppp~3!offset) }); VAL [#in~lock!base=2147745877bv32, #in~lock!offset=435bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L5132-L5139] ~lock := #in~lock; [L5137] #res := { base: ~lock!base, offset: ~lock!offset }; VAL [#in~lock!base=2147745877bv32, #in~lock!offset=435bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res!base=2147745877bv32, #res!offset=435bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~lock!base=2147745877bv32, ~lock!offset=435bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6014] RET call #t~ret196 := spinlock_check({ base: ~ppp~3!base, offset: ~bvadd32(435bv32, ~ppp~3!offset) }); VAL [#in~arg=0bv64, #NULL!base=0bv32, #NULL!offset=0bv32, #t~ret196!base=2147745877bv32, #t~ret196!offset=435bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~arg=0bv64, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ppp~3!base=2147745877bv32, ~ppp~3!offset=0bv32, ~proto___0~2!base=0bv32, ~proto___0~2!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp~16!base=2147745877bv32, ~tmp~16!offset=0bv32] [L6014] ~tmp___0~6 := #t~ret196; [L6014] havoc #t~ret196; [L6015] FCALL call #t~ret197 := _raw_spin_lock_irqsave(~tmp___0~6); [L6015] ~flags~1 := #t~ret197; [L6015] havoc #t~ret197; [L6016] FCALL call #t~mem198 := read~intINTTYPE1({ base: ~proto___0~2!base, offset: ~bvadd32(142bv32, ~proto___0~2!offset) }, 1bv32); [L6017] #t~switch199 := 2bv32 == ~zero_extendFrom8To32(#t~mem198); VAL [#in~arg=0bv64, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem198=6bv8, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch199=false, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~arg=0bv64, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ppp~3!base=2147745877bv32, ~ppp~3!offset=0bv32, ~proto___0~2!base=0bv32, ~proto___0~2!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~6!base=2147745877bv32, ~tmp___0~6!offset=435bv32, ~tmp~16!base=2147745877bv32, ~tmp~16!offset=0bv32] [L6016-L6046] COND FALSE !(#t~switch199) VAL [#in~arg=0bv64, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem198=6bv8, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch199=false, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~arg=0bv64, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ppp~3!base=2147745877bv32, ~ppp~3!offset=0bv32, ~proto___0~2!base=0bv32, ~proto___0~2!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~6!base=2147745877bv32, ~tmp___0~6!offset=435bv32, ~tmp~16!base=2147745877bv32, ~tmp~16!offset=0bv32] [L6018] #t~switch199 := #t~switch199 || 3bv32 == ~zero_extendFrom8To32(#t~mem198); VAL [#in~arg=0bv64, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem198=6bv8, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch199=false, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~arg=0bv64, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ppp~3!base=2147745877bv32, ~ppp~3!offset=0bv32, ~proto___0~2!base=0bv32, ~proto___0~2!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~6!base=2147745877bv32, ~tmp___0~6!offset=435bv32, ~tmp~16!base=2147745877bv32, ~tmp~16!offset=0bv32] [L6016-L6046] COND FALSE !(#t~switch199) VAL [#in~arg=0bv64, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem198=6bv8, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch199=false, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~arg=0bv64, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ppp~3!base=2147745877bv32, ~ppp~3!offset=0bv32, ~proto___0~2!base=0bv32, ~proto___0~2!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~6!base=2147745877bv32, ~tmp___0~6!offset=435bv32, ~tmp~16!base=2147745877bv32, ~tmp~16!offset=0bv32] [L6019] #t~switch199 := #t~switch199 || 4bv32 == ~zero_extendFrom8To32(#t~mem198); VAL [#in~arg=0bv64, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem198=6bv8, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch199=false, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~arg=0bv64, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ppp~3!base=2147745877bv32, ~ppp~3!offset=0bv32, ~proto___0~2!base=0bv32, ~proto___0~2!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~6!base=2147745877bv32, ~tmp___0~6!offset=435bv32, ~tmp~16!base=2147745877bv32, ~tmp~16!offset=0bv32] [L6016-L6046] COND FALSE !(#t~switch199) VAL [#in~arg=0bv64, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem198=6bv8, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch199=false, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~arg=0bv64, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ppp~3!base=2147745877bv32, ~ppp~3!offset=0bv32, ~proto___0~2!base=0bv32, ~proto___0~2!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~6!base=2147745877bv32, ~tmp___0~6!offset=435bv32, ~tmp~16!base=2147745877bv32, ~tmp~16!offset=0bv32] [L6020] #t~switch199 := #t~switch199 || 5bv32 == ~zero_extendFrom8To32(#t~mem198); VAL [#in~arg=0bv64, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem198=6bv8, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch199=false, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~arg=0bv64, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ppp~3!base=2147745877bv32, ~ppp~3!offset=0bv32, ~proto___0~2!base=0bv32, ~proto___0~2!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~6!base=2147745877bv32, ~tmp___0~6!offset=435bv32, ~tmp~16!base=2147745877bv32, ~tmp~16!offset=0bv32] [L6016-L6046] COND FALSE !(#t~switch199) [L6028] #t~switch199 := #t~switch199 || 6bv32 == ~zero_extendFrom8To32(#t~mem198); VAL [#in~arg=0bv64, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem198=6bv8, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch199=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~arg=0bv64, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ppp~3!base=2147745877bv32, ~ppp~3!offset=0bv32, ~proto___0~2!base=0bv32, ~proto___0~2!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~6!base=2147745877bv32, ~tmp___0~6!offset=435bv32, ~tmp~16!base=2147745877bv32, ~tmp~16!offset=0bv32] [L6016-L6046] COND TRUE #t~switch199 [L6029] FCALL call #t~mem206 := read~intINTTYPE2({ base: ~proto___0~2!base, offset: ~bvadd32(140bv32, ~proto___0~2!offset) }, 2bv32); VAL [#in~arg=0bv64, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem198=6bv8, #t~mem206=0bv16, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch199=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~arg=0bv64, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ppp~3!base=2147745877bv32, ~ppp~3!offset=0bv32, ~proto___0~2!base=0bv32, ~proto___0~2!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~6!base=2147745877bv32, ~tmp___0~6!offset=435bv32, ~tmp~16!base=2147745877bv32, ~tmp~16!offset=0bv32] [L6029] COND TRUE 49185bv32 != ~zero_extendFrom16To32(#t~mem206) [L6029] havoc #t~mem206; VAL [#in~arg=0bv64, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem198=6bv8, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch199=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~arg=0bv64, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ppp~3!base=2147745877bv32, ~ppp~3!offset=0bv32, ~proto___0~2!base=0bv32, ~proto___0~2!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~6!base=2147745877bv32, ~tmp___0~6!offset=435bv32, ~tmp~16!base=2147745877bv32, ~tmp~16!offset=0bv32] [L6048] CALL call spin_unlock_irqrestore({ base: ~ppp~3!base, offset: ~bvadd32(435bv32, ~ppp~3!offset) }, ~flags~1); VAL [#in~flags=0bv64, #in~lock!base=2147745877bv32, #in~lock!offset=435bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L5140-L5148] ~lock := #in~lock; [L5140-L5148] ~flags := #in~flags; [L5145] FCALL call _raw_spin_unlock_irqrestore({ base: ~lock!base, offset: ~lock!offset }, ~flags); VAL [#in~flags=0bv64, #in~lock!base=2147745877bv32, #in~lock!offset=435bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~flags=0bv64, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~lock!base=2147745877bv32, ~lock!offset=435bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6048] RET call spin_unlock_irqrestore({ base: ~ppp~3!base, offset: ~bvadd32(435bv32, ~ppp~3!offset) }, ~flags~1); VAL [#in~arg=0bv64, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem198=6bv8, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch199=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~arg=0bv64, ~flags~1=0bv64, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ppp~3!base=2147745877bv32, ~ppp~3!offset=0bv32, ~proto___0~2!base=0bv32, ~proto___0~2!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~6!base=2147745877bv32, ~tmp___0~6!offset=435bv32, ~tmp~16!base=2147745877bv32, ~tmp~16!offset=0bv32] [L6049] CALL call ppp_tx_flush(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L5519] havoc ~skb~0; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L5526] CALL call #t~ret81 := ldv_skb_dequeue_12(~#tx_queue~0); VAL [#in~ldv_func_arg1!base=2147745877bv32, #in~ldv_func_arg1!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6623-L6631] ~ldv_func_arg1 := #in~ldv_func_arg1; [L6625] havoc ~tmp~21; VAL [#in~ldv_func_arg1!base=2147745877bv32, #in~ldv_func_arg1!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~ldv_func_arg1!base=2147745877bv32, ~ldv_func_arg1!offset=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6628] CALL call #t~ret283 := ldv_skb_alloc(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6839] havoc ~skb~2; [L6840] havoc ~tmp___7~3; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6843] CALL call #t~ret293 := ldv_zalloc(248bv32); VAL [#in~size=248bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L5253-L5270] ~size := #in~size; [L5255] havoc ~p~1; [L5256] havoc ~tmp~2; [L5257] havoc ~tmp___0~1; [L5260] ~tmp___0~1 := #t~nondet38; [L5260] havoc #t~nondet38; VAL [#in~size=248bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~size=248bv32, ~tmp___0~1=0bv32] [L5261] COND FALSE !(0bv32 != ~tmp___0~1) [L5264] FCALL call #t~malloc39 := #Ultimate.alloc(~size); VAL [#in~size=248bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc39!base=2818834517bv32, #t~malloc39!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~size=248bv32, ~tmp___0~1=0bv32] [L5264] CALL call #Ultimate.meminit(#t~malloc39, 1bv32, ~size, ~size); VAL [#amountOfFields=1bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #product=248bv32, #ptr!base=2818834517bv32, #ptr!offset=0bv32, #sizeOfFields=248bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [?] #memory_int := ~initToZeroAtPointerBaseAddress~int(#memory_int, #ptr!base); VAL [#amountOfFields=1bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #product=248bv32, #ptr!base=2818834517bv32, #ptr!offset=0bv32, #sizeOfFields=248bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L5264] RET call #Ultimate.meminit(#t~malloc39, 1bv32, ~size, ~size); VAL [#in~size=248bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc39!base=2818834517bv32, #t~malloc39!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~size=248bv32, ~tmp___0~1=0bv32] [L5264] ~tmp~2 := #t~malloc39; [L5265] ~p~1 := ~tmp~2; [L5266] assume 0bv32 != (if ~sign_extendFrom32To64(~bvadd32(~p~1!base, ~p~1!offset)) != ~sign_extendFrom32To64(0bv32) then 1bv32 else 0bv32); [L5267] #res := ~p~1; VAL [#in~size=248bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res!base=2818834517bv32, #res!offset=0bv32, #t~malloc39!base=2818834517bv32, #t~malloc39!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~p~1!base=2818834517bv32, ~p~1!offset=0bv32, ~ref_cnt~0=0bv32, ~size=248bv32, ~tmp___0~1=0bv32, ~tmp~2!base=2818834517bv32, ~tmp~2!offset=0bv32] [L6843] RET call #t~ret293 := ldv_zalloc(248bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~ret293!base=2818834517bv32, #t~ret293!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6843] ~tmp___7~3 := #t~ret293; [L6843] havoc #t~ret293; [L6844] ~skb~2 := ~tmp___7~3; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~skb~2!base=2818834517bv32, ~skb~2!offset=0bv32, ~tmp___7~3!base=2818834517bv32, ~tmp___7~3!offset=0bv32] [L6845] COND FALSE !(~skb~2 == { base: 0bv32, offset: 0bv32 }) VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~skb~2!base=2818834517bv32, ~skb~2!offset=0bv32, ~tmp___7~3!base=2818834517bv32, ~tmp___7~3!offset=0bv32] [L6848] CALL call ldv_set_add(~LDV_SKBS~0, ~skb~2); VAL [#in~e!base=2818834517bv32, #in~e!offset=0bv32, #in~set!base=0bv32, #in~set!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6692-L6719] ~set := #in~set; [L6692-L6719] ~e := #in~e; [L6694] havoc ~i~1; [L6697] ~i~1 := 0bv32; VAL [#in~e!base=2818834517bv32, #in~e!offset=0bv32, #in~set!base=0bv32, #in~set!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~e!base=2818834517bv32, ~e!offset=0bv32, ~i~1=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~set!base=0bv32, ~set!offset=0bv32] [L6698-L6710] COND FALSE !(false) VAL [#in~e!base=2818834517bv32, #in~e!offset=0bv32, #in~set!base=0bv32, #in~set!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~e!base=2818834517bv32, ~e!offset=0bv32, ~i~1=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~set!base=0bv32, ~set!offset=0bv32] [L6699] COND FALSE !(~bvslt32(~i~1, ~last_index~0)) VAL [#in~e!base=2818834517bv32, #in~e!offset=0bv32, #in~set!base=0bv32, #in~set!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~e!base=2818834517bv32, ~e!offset=0bv32, ~i~1=0bv32, ~last_index~0=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~set!base=0bv32, ~set!offset=0bv32] [L6711] COND TRUE ~bvslt32(~last_index~0, 15bv32) [L6712] FCALL call write~$Pointer$(~e, { base: ~#set_impl~0!base, offset: ~bvadd32(~#set_impl~0!offset, ~bvmul32(8bv32, ~last_index~0)) }, 8bv32); [L6713] ~last_index~0 := ~bvadd32(1bv32, ~last_index~0); VAL [#in~e!base=2818834517bv32, #in~e!offset=0bv32, #in~set!base=0bv32, #in~set!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~e!base=2818834517bv32, ~e!offset=0bv32, ~i~1=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~set!base=0bv32, ~set!offset=0bv32] [L6848] RET call ldv_set_add(~LDV_SKBS~0, ~skb~2); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~skb~2!base=2818834517bv32, ~skb~2!offset=0bv32, ~tmp___7~3!base=2818834517bv32, ~tmp___7~3!offset=0bv32] [L6849] #res := ~skb~2; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #res!base=2818834517bv32, #res!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~skb~2!base=2818834517bv32, ~skb~2!offset=0bv32, ~tmp___7~3!base=2818834517bv32, ~tmp___7~3!offset=0bv32] [L6628] RET call #t~ret283 := ldv_skb_alloc(); VAL [#in~ldv_func_arg1!base=2147745877bv32, #in~ldv_func_arg1!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~ret283!base=2818834517bv32, #t~ret283!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~ldv_func_arg1!base=2147745877bv32, ~ldv_func_arg1!offset=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6628] ~tmp~21 := #t~ret283; [L6628] havoc #t~ret283; [L6629] #res := ~tmp~21; VAL [#in~ldv_func_arg1!base=2147745877bv32, #in~ldv_func_arg1!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res!base=2818834517bv32, #res!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~ldv_func_arg1!base=2147745877bv32, ~ldv_func_arg1!offset=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp~21!base=2818834517bv32, ~tmp~21!offset=0bv32] [L5526] RET call #t~ret81 := ldv_skb_dequeue_12(~#tx_queue~0); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~ret81!base=2818834517bv32, #t~ret81!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L5526] ~skb~0 := #t~ret81; [L5526] havoc #t~ret81; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~skb~0!base=2818834517bv32, ~skb~0!offset=0bv32] [L5527] COND TRUE ~sign_extendFrom32To64(~bvadd32(~skb~0!base, ~skb~0!offset)) != ~sign_extendFrom32To64(0bv32) VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~skb~0!base=2818834517bv32, ~skb~0!offset=0bv32] [L5524] FCALL call #t~ret80 := dev_queue_xmit(~skb~0); [L5524] havoc #t~ret80; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~skb~0!base=2818834517bv32, ~skb~0!offset=0bv32] [L5526] CALL call #t~ret81 := ldv_skb_dequeue_12(~#tx_queue~0); VAL [#in~ldv_func_arg1!base=2147745877bv32, #in~ldv_func_arg1!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=1bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6623-L6631] ~ldv_func_arg1 := #in~ldv_func_arg1; [L6625] havoc ~tmp~21; VAL [#in~ldv_func_arg1!base=2147745877bv32, #in~ldv_func_arg1!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=1bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~ldv_func_arg1!base=2147745877bv32, ~ldv_func_arg1!offset=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6628] CALL call #t~ret283 := ldv_skb_alloc(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=1bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6839] havoc ~skb~2; [L6840] havoc ~tmp___7~3; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=1bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6843] CALL call #t~ret293 := ldv_zalloc(248bv32); VAL [#in~size=248bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=1bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L5253-L5270] ~size := #in~size; [L5255] havoc ~p~1; [L5256] havoc ~tmp~2; [L5257] havoc ~tmp___0~1; [L5260] ~tmp___0~1 := #t~nondet38; [L5260] havoc #t~nondet38; VAL [#in~size=248bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=1bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~size=248bv32, ~tmp___0~1=1bv32] [L5261] COND TRUE 0bv32 != ~tmp___0~1 [L5262] #res := { base: 0bv32, offset: 0bv32 }; VAL [#in~size=248bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res!base=0bv32, #res!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=1bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~size=248bv32, ~tmp___0~1=1bv32] [L6843] RET call #t~ret293 := ldv_zalloc(248bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~ret293!base=0bv32, #t~ret293!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=1bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6843] ~tmp___7~3 := #t~ret293; [L6843] havoc #t~ret293; [L6844] ~skb~2 := ~tmp___7~3; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=1bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~skb~2!base=0bv32, ~skb~2!offset=0bv32, ~tmp___7~3!base=0bv32, ~tmp___7~3!offset=0bv32] [L6845] COND TRUE ~skb~2 == { base: 0bv32, offset: 0bv32 } [L6846] #res := { base: 0bv32, offset: 0bv32 }; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #res!base=0bv32, #res!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=1bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~skb~2!base=0bv32, ~skb~2!offset=0bv32, ~tmp___7~3!base=0bv32, ~tmp___7~3!offset=0bv32] [L6628] RET call #t~ret283 := ldv_skb_alloc(); VAL [#in~ldv_func_arg1!base=2147745877bv32, #in~ldv_func_arg1!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~ret283!base=0bv32, #t~ret283!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=1bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~ldv_func_arg1!base=2147745877bv32, ~ldv_func_arg1!offset=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6628] ~tmp~21 := #t~ret283; [L6628] havoc #t~ret283; [L6629] #res := ~tmp~21; VAL [#in~ldv_func_arg1!base=2147745877bv32, #in~ldv_func_arg1!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res!base=0bv32, #res!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=1bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~ldv_func_arg1!base=2147745877bv32, ~ldv_func_arg1!offset=0bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp~21!base=0bv32, ~tmp~21!offset=0bv32] [L5526] RET call #t~ret81 := ldv_skb_dequeue_12(~#tx_queue~0); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~ret81!base=0bv32, #t~ret81!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~skb~0!base=2818834517bv32, ~skb~0!offset=0bv32] [L5526] ~skb~0 := #t~ret81; [L5526] havoc #t~ret81; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~skb~0!base=0bv32, ~skb~0!offset=0bv32] [L5527] COND FALSE !(~sign_extendFrom32To64(~bvadd32(~skb~0!base, ~skb~0!offset)) != ~sign_extendFrom32To64(0bv32)) VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~skb~0!base=0bv32, ~skb~0!offset=0bv32] [L6049] RET call ppp_tx_flush(); VAL [#in~arg=0bv64, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem198=6bv8, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch199=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~arg=0bv64, ~flags~1=0bv64, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~ppp~3!base=2147745877bv32, ~ppp~3!offset=0bv32, ~proto___0~2!base=0bv32, ~proto___0~2!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~6!base=2147745877bv32, ~tmp___0~6!offset=435bv32, ~tmp~16!base=2147745877bv32, ~tmp~16!offset=0bv32] [?] RET call ppp_timer(#~242); VAL [#in~#fp!base=0bv32, #in~#fp!offset=0bv32, #in~242=0bv64, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #~242=0bv64, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6245] RET call ##fun~C_ULONG~TO~VOID(#t~mem243, #t~mem244); VAL [#in~timer!base=0bv32, #in~timer!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem243=0bv64, #t~mem244!base=0bv32, #t~mem244!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=2bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~timer!base=0bv32, ~timer!offset=0bv32] [L6245] havoc #t~mem243; [L6245] havoc #t~mem244; [L6246] ~LDV_IN_INTERRUPT~0 := 1bv32; [L6247] ~ldv_timer_state_1~0 := 2bv32; VAL [#in~timer!base=0bv32, #in~timer!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=2bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~timer!base=0bv32, ~timer!offset=0bv32] [L6322] RET call choose_timer_1(~ldv_timer_list_1~0); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch253=true, #t~switch255=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=2bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0!base=0bv32, ~ldvarg2~0!offset=0bv32, ~ldvarg3~0!base=0bv32, ~ldvarg3~0!offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0!base=0bv32, ~ldvarg5~0!offset=0bv32, ~ldvarg6~0!base=0bv32, ~ldvarg6~0!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5!base=0bv32, ~tmp___2~5!offset=0bv32, ~tmp___3~2!base=0bv32, ~tmp___3~2!offset=0bv32, ~tmp___4~3!base=0bv32, ~tmp___4~3!offset=0bv32, ~tmp___5~1!base=0bv32, ~tmp___5~1!offset=0bv32, ~tmp___6~1=0bv32, ~tmp___7~1=1bv32, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6318] ~tmp___6~1 := #t~nondet252; [L6318] havoc #t~nondet252; [L6320] #t~switch253 := 0bv32 == ~tmp___6~1; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch253=false, #t~switch255=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=2bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0!base=0bv32, ~ldvarg2~0!offset=0bv32, ~ldvarg3~0!base=0bv32, ~ldvarg3~0!offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0!base=0bv32, ~ldvarg5~0!offset=0bv32, ~ldvarg6~0!base=0bv32, ~ldvarg6~0!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5!base=0bv32, ~tmp___2~5!offset=0bv32, ~tmp___3~2!base=0bv32, ~tmp___3~2!offset=0bv32, ~tmp___4~3!base=0bv32, ~tmp___4~3!offset=0bv32, ~tmp___5~1!base=0bv32, ~tmp___5~1!offset=0bv32, ~tmp___6~1=1bv32, ~tmp___7~1=1bv32, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6319-L6570] COND FALSE !(#t~switch253) [L6327] #t~switch253 := #t~switch253 || 1bv32 == ~tmp___6~1; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch253=true, #t~switch255=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=2bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0!base=0bv32, ~ldvarg2~0!offset=0bv32, ~ldvarg3~0!base=0bv32, ~ldvarg3~0!offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0!base=0bv32, ~ldvarg5~0!offset=0bv32, ~ldvarg6~0!base=0bv32, ~ldvarg6~0!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5!base=0bv32, ~tmp___2~5!offset=0bv32, ~tmp___3~2!base=0bv32, ~tmp___3~2!offset=0bv32, ~tmp___4~3!base=0bv32, ~tmp___4~3!offset=0bv32, ~tmp___5~1!base=0bv32, ~tmp___5~1!offset=0bv32, ~tmp___6~1=1bv32, ~tmp___7~1=1bv32, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6319-L6570] COND TRUE #t~switch253 VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch253=true, #t~switch255=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=2bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0!base=0bv32, ~ldvarg2~0!offset=0bv32, ~ldvarg3~0!base=0bv32, ~ldvarg3~0!offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0!base=0bv32, ~ldvarg5~0!offset=0bv32, ~ldvarg6~0!base=0bv32, ~ldvarg6~0!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5!base=0bv32, ~tmp___2~5!offset=0bv32, ~tmp___3~2!base=0bv32, ~tmp___3~2!offset=0bv32, ~tmp___4~3!base=0bv32, ~tmp___4~3!offset=0bv32, ~tmp___5~1!base=0bv32, ~tmp___5~1!offset=0bv32, ~tmp___6~1=1bv32, ~tmp___7~1=1bv32, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6328] COND TRUE 0bv32 != ~ldv_state_variable_0~0 [L6329] ~tmp___7~1 := #t~nondet254; [L6329] havoc #t~nondet254; [L6331] #t~switch255 := 0bv32 == ~tmp___7~1; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch253=true, #t~switch255=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=2bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0!base=0bv32, ~ldvarg2~0!offset=0bv32, ~ldvarg3~0!base=0bv32, ~ldvarg3~0!offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0!base=0bv32, ~ldvarg5~0!offset=0bv32, ~ldvarg6~0!base=0bv32, ~ldvarg6~0!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5!base=0bv32, ~tmp___2~5!offset=0bv32, ~tmp___3~2!base=0bv32, ~tmp___3~2!offset=0bv32, ~tmp___4~3!base=0bv32, ~tmp___4~3!offset=0bv32, ~tmp___5~1!base=0bv32, ~tmp___5~1!offset=0bv32, ~tmp___6~1=1bv32, ~tmp___7~1=0bv32, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6330-L6363] COND TRUE #t~switch255 VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch253=true, #t~switch255=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=2bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0!base=0bv32, ~ldvarg2~0!offset=0bv32, ~ldvarg3~0!base=0bv32, ~ldvarg3~0!offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0!base=0bv32, ~ldvarg5~0!offset=0bv32, ~ldvarg6~0!base=0bv32, ~ldvarg6~0!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5!base=0bv32, ~tmp___2~5!offset=0bv32, ~tmp___3~2!base=0bv32, ~tmp___3~2!offset=0bv32, ~tmp___4~3!base=0bv32, ~tmp___4~3!offset=0bv32, ~tmp___5~1!base=0bv32, ~tmp___5~1!offset=0bv32, ~tmp___6~1=1bv32, ~tmp___7~1=0bv32, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6332] COND TRUE 3bv32 == ~ldv_state_variable_0~0 && 0bv32 == ~ref_cnt~0 VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch253=true, #t~switch255=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=2bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0!base=0bv32, ~ldvarg2~0!offset=0bv32, ~ldvarg3~0!base=0bv32, ~ldvarg3~0!offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0!base=0bv32, ~ldvarg5~0!offset=0bv32, ~ldvarg6~0!base=0bv32, ~ldvarg6~0!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5!base=0bv32, ~tmp___2~5!offset=0bv32, ~tmp___3~2!base=0bv32, ~tmp___3~2!offset=0bv32, ~tmp___4~3!base=0bv32, ~tmp___4~3!offset=0bv32, ~tmp___5~1!base=0bv32, ~tmp___5~1!offset=0bv32, ~tmp___6~1=1bv32, ~tmp___7~1=0bv32, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6333] CALL call mod_exit(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=2bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6193] FCALL call unregister_hdlc_protocol(~#proto~0); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=2bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6333] RET call mod_exit(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch253=true, #t~switch255=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=3bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=2bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0!base=0bv32, ~ldvarg2~0!offset=0bv32, ~ldvarg3~0!base=0bv32, ~ldvarg3~0!offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0!base=0bv32, ~ldvarg5~0!offset=0bv32, ~ldvarg6~0!base=0bv32, ~ldvarg6~0!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5!base=0bv32, ~tmp___2~5!offset=0bv32, ~tmp___3~2!base=0bv32, ~tmp___3~2!offset=0bv32, ~tmp___4~3!base=0bv32, ~tmp___4~3!offset=0bv32, ~tmp___5~1!base=0bv32, ~tmp___5~1!offset=0bv32, ~tmp___6~1=1bv32, ~tmp___7~1=0bv32, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6334] ~ldv_state_variable_0~0 := 2bv32; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, #t~switch253=true, #t~switch255=true, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=2bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=2bv32, ~ldvarg0~0!base=0bv32, ~ldvarg0~0!offset=0bv32, ~ldvarg1~0=0bv32, ~ldvarg2~0!base=0bv32, ~ldvarg2~0!offset=0bv32, ~ldvarg3~0!base=0bv32, ~ldvarg3~0!offset=0bv32, ~ldvarg4~0=0bv16, ~ldvarg5~0!base=0bv32, ~ldvarg5~0!offset=0bv32, ~ldvarg6~0!base=0bv32, ~ldvarg6~0!offset=0bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___0~9=0bv32, ~tmp___1~3=0bv16, ~tmp___2~5!base=0bv32, ~tmp___2~5!offset=0bv32, ~tmp___3~2!base=0bv32, ~tmp___3~2!offset=0bv32, ~tmp___4~3!base=0bv32, ~tmp___4~3!offset=0bv32, ~tmp___5~1!base=0bv32, ~tmp___5~1!offset=0bv32, ~tmp___6~1=1bv32, ~tmp___7~1=0bv32, ~tmp~20!base=0bv32, ~tmp~20!offset=0bv32] [L6574] CALL call ldv_check_final_state(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=2bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=2bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6916] havoc ~tmp___7~7; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=2bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=2bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6919] CALL call #t~ret297 := ldv_set_is_empty(~LDV_SKBS~0); VAL [#in~set!base=0bv32, #in~set!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=2bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=2bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6785-L6792] ~set := #in~set; [L6790] #res := (if 0bv32 == ~last_index~0 then 1bv32 else 0bv32); VAL [#in~set!base=0bv32, #in~set!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=2bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=2bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~set!base=0bv32, ~set!offset=0bv32] [L6919] RET call #t~ret297 := ldv_set_is_empty(~LDV_SKBS~0); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~ret297=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=2bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=2bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L6919] ~tmp___7~7 := #t~ret297; [L6919] havoc #t~ret297; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=2bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=2bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___7~7=0bv32] [L6920-L6924] COND FALSE !(0bv32 != ~tmp___7~7) VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=2bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=2bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32, ~tmp___7~7=0bv32] [L6923] CALL call ldv_error(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=2bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=2bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L5304] assert false; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string114!base=2147483653bv32, #t~string114!offset=0bv32, #t~string121!base=2147483718bv32, #t~string121!offset=0bv32, #t~string211!base=2147745863bv32, #t~string211!offset=0bv32, #t~string22!base=2415919172bv32, #t~string22!offset=0bv32, #t~string237!base=2147745860bv32, #t~string237!offset=0bv32, #t~string64!base=2147745862bv32, #t~string64!offset=0bv32, #t~string65!base=2147745861bv32, #t~string65!offset=0bv32, #t~string66!base=2147745909bv32, #t~string66!offset=0bv32, #t~string84!base=2147754069bv32, #t~string84!offset=0bv32, old(~last_index~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=1bv32, old(~ldv_retval_0~0)=0bv32, old(~ldv_state_variable_0~0)=0bv32, old(~ldv_state_variable_1~0)=0bv32, old(~ldv_state_variable_2~0)=0bv32, old(~ldv_state_variable_3~0)=0bv32, old(~ldv_timer_list_1~0!base)=0bv32, old(~ldv_timer_list_1~0!offset)=0bv32, old(~ldv_timer_state_1~0)=0bv32, old(~proto_group0~0!base)=0bv32, old(~proto_group0~0!offset)=0bv32, old(~proto_group1~0!base)=0bv32, old(~proto_group1~0!offset)=0bv32, old(~ref_cnt~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#cp_table~0!base=2684616789bv32, ~#cp_table~0!offset=0bv32, ~#ppp_header_ops~0!base=2147745876bv32, ~#ppp_header_ops~0!offset=0bv32, ~#proto~0!base=2147745857bv32, ~#proto~0!offset=0bv32, ~#set_impl~0!base=2147483717bv32, ~#set_impl~0!offset=0bv32, ~#tx_queue~0!base=2147745877bv32, ~#tx_queue~0!offset=0bv32, ~last_index~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~ldv_retval_0~0=0bv32, ~LDV_SKBS~0!base=0bv32, ~LDV_SKBS~0!offset=0bv32, ~ldv_state_variable_0~0=2bv32, ~ldv_state_variable_1~0=1bv32, ~ldv_state_variable_2~0=1bv32, ~ldv_state_variable_3~0=1bv32, ~ldv_timer_list_1~0!base=0bv32, ~ldv_timer_list_1~0!offset=0bv32, ~ldv_timer_state_1~0=2bv32, ~proto_group0~0!base=0bv32, ~proto_group0~0!offset=0bv32, ~proto_group1~0!base=0bv32, ~proto_group1~0!offset=0bv32, ~ref_cnt~0=0bv32] [L5333] int LDV_IN_INTERRUPT = 1; [L5335] int ldv_state_variable_0 ; [L5336] int ldv_state_variable_3 ; [L5337] int ldv_timer_state_1 = 0; [L5338] int ldv_state_variable_2 ; [L5340] int ref_cnt ; [L5341] int ldv_state_variable_1 ; [L5595-L5621] static int cp_table[13U][7U] = { { 163, 16, 16, 16, 16, 16, 16}, { 16, 0, 0, 0, 0, 0, 0}, { 16, 16, 1026, 131, 131, 133, 16}, { 16, 16, 1, 1, 1, 1, 16}, { 2048, 421, 2, 261, 262, 261, 389}, { 2048, 675, 2, 515, 516, 515, 643}, { 2048, 2049, 2, 36, 131, 6, 131}, { 2048, 2049, 2, 163, 131, 165, 131}, { 2048, 2049, 2050, 2051, 2051, 2051, 2114}, { 0, 1, 1, 3, 3, 5, 131}, { 4096, 4097, 4098, 4099, 4100, 4101, 4102}, { 0, 1, 2, 3, 3, 5, 6}, { 0, 1, 1, 1, 1, 1, 1058}}; [L6197] int ldv_retval_0 ; [L6679] int last_index = 0; [L5334] struct net_device *proto_group1 ; [L5339] struct sk_buff *proto_group0 ; [L5342] struct timer_list *ldv_timer_list_1 ; [L5410] static struct sk_buff_head tx_queue ; [L6104-L6106] static struct hdlc_proto proto = {0, & ppp_close, & ppp_start, & ppp_stop, 0, & ppp_ioctl, & ppp_type_trans, & ppp_rx, 0, & __this_module, 0}; [L6107] static struct header_ops const ppp_header_ops = {& ppp_hard_header, 0, 0, 0, 0}; [L6678] Element set_impl[15] ; [L6836] Set LDV_SKBS ; VAL [\old(cp_table)=null, \old(cp_table)=null, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_retval_0)=0, \old(LDV_SKBS)=null, \old(LDV_SKBS)=null, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(ppp_header_ops)=null, \old(ppp_header_ops)=null, \old(proto)=null, \old(proto)=null, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(set_impl)=null, \old(set_impl)=null, \old(tx_queue)=null, \old(tx_queue)=null, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6277] struct ifreq *ldvarg0 ; [L6278] void *tmp ; [L6279] unsigned int ldvarg1 ; [L6280] unsigned int tmp___0 ; [L6281] unsigned short ldvarg4 ; [L6282] unsigned short tmp___1 ; [L6283] struct sk_buff *ldvarg3 ; [L6284] void *tmp___2 ; [L6285] struct net_device *ldvarg5 ; [L6286] void *tmp___3 ; [L6287] void *ldvarg2 ; [L6288] void *tmp___4 ; [L6289] void *ldvarg6 ; [L6290] void *tmp___5 ; [L6291] int tmp___6 ; [L6292] int tmp___7 ; [L6293] int tmp___8 ; [L6294] int tmp___9 ; VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6297] CALL, EXPR ldv_zalloc(40UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=40, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5255] void *p ; [L5256] void *tmp ; [L5257] int tmp___0 ; [L5260] tmp___0 = __VERIFIER_nondet_int() [L5261] COND TRUE tmp___0 != 0 [L5262] return ((void *)0); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=40, \result={0:0}, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, size=40, tmp___0=1, tx_queue={-2147221419:0}] [L6297] RET, EXPR ldv_zalloc(40UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(40UL)={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6297] tmp = ldv_zalloc(40UL) [L6298] ldvarg0 = (struct ifreq *)tmp [L6299] tmp___0 = __VERIFIER_nondet_uint() [L6300] ldvarg1 = tmp___0 [L6301] tmp___1 = __VERIFIER_nondet_ushort() [L6302] ldvarg4 = tmp___1 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=0, ldvarg4=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tx_queue={-2147221419:0}] [L6303] CALL, EXPR ldv_zalloc(232UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=232, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5255] void *p ; [L5256] void *tmp ; [L5257] int tmp___0 ; [L5260] tmp___0 = __VERIFIER_nondet_int() [L5261] COND TRUE tmp___0 != 0 [L5262] return ((void *)0); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=232, \result={0:0}, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, size=232, tmp___0=1, tx_queue={-2147221419:0}] [L6303] RET, EXPR ldv_zalloc(232UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(232UL)={0:0}, ldvarg0={0:0}, ldvarg1=0, ldvarg4=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tx_queue={-2147221419:0}] [L6303] tmp___2 = ldv_zalloc(232UL) [L6304] ldvarg3 = (struct sk_buff *)tmp___2 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=0, ldvarg3={0:0}, ldvarg4=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tx_queue={-2147221419:0}] [L6305] CALL, EXPR ldv_zalloc(3264UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=3264, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5255] void *p ; [L5256] void *tmp ; [L5257] int tmp___0 ; [L5260] tmp___0 = __VERIFIER_nondet_int() [L5261] COND TRUE tmp___0 != 0 [L5262] return ((void *)0); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=3264, \result={0:0}, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, size=3264, tmp___0=1, tx_queue={-2147221419:0}] [L6305] RET, EXPR ldv_zalloc(3264UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(3264UL)={0:0}, ldvarg0={0:0}, ldvarg1=0, ldvarg3={0:0}, ldvarg4=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tx_queue={-2147221419:0}] [L6305] tmp___3 = ldv_zalloc(3264UL) [L6306] ldvarg5 = (struct net_device *)tmp___3 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=0, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tx_queue={-2147221419:0}] [L6307] CALL, EXPR ldv_zalloc(1UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=1, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5255] void *p ; [L5256] void *tmp ; [L5257] int tmp___0 ; [L5260] tmp___0 = __VERIFIER_nondet_int() [L5261] COND TRUE tmp___0 != 0 [L5262] return ((void *)0); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=1, \result={0:0}, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, size=1, tmp___0=1, tx_queue={-2147221419:0}] [L6307] RET, EXPR ldv_zalloc(1UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=0, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tx_queue={-2147221419:0}] [L6307] tmp___4 = ldv_zalloc(1UL) [L6308] ldvarg2 = tmp___4 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tx_queue={-2147221419:0}] [L6309] CALL, EXPR ldv_zalloc(1UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=1, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5255] void *p ; [L5256] void *tmp ; [L5257] int tmp___0 ; [L5260] tmp___0 = __VERIFIER_nondet_int() [L5261] COND TRUE tmp___0 != 0 [L5262] return ((void *)0); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=1, \result={0:0}, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, size=1, tmp___0=1, tx_queue={-2147221419:0}] [L6309] RET, EXPR ldv_zalloc(1UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tx_queue={-2147221419:0}] [L6309] tmp___5 = ldv_zalloc(1UL) [L6310] ldvarg6 = tmp___5 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tx_queue={-2147221419:0}] [L6311] CALL ldv_initialize() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6858] CALL ldv_set_init(LDV_SKBS) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6686] set = set_impl [L6687] last_index = 0 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={-2147483579:0}, set={0:0}, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6858] RET ldv_set_init(LDV_SKBS) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6311] RET ldv_initialize() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tx_queue={-2147221419:0}] [L6312] ldv_state_variable_1 = 1 [L6313] ref_cnt = 0 [L6314] ldv_state_variable_0 = 1 [L6315] ldv_state_variable_3 = 0 [L6316] ldv_state_variable_2 = 0 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tx_queue={-2147221419:0}] [L6318] tmp___6 = __VERIFIER_nondet_int() [L6320] case 0: [L6327] case 1: VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tx_queue={-2147221419:0}] [L6328] COND TRUE ldv_state_variable_0 != 0 [L6329] tmp___7 = __VERIFIER_nondet_int() [L6331] case 0: [L6340] case 1: VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=1, tx_queue={-2147221419:0}] [L6341] COND TRUE ldv_state_variable_0 == 1 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=1, tx_queue={-2147221419:0}] [L6342] CALL, EXPR mod_init() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6183] CALL skb_queue_head_init(& tx_queue) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, list={-2147221419:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5191] struct lock_class_key __key ; VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __key={-1476132779:0}, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, list={-2147221419:0}, list={-2147221419:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5194] CALL spinlock_check(& list->lock) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, lock={-2147221419:20}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5137] return (& lock->ldv_6338.rlock); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \result={-2147221419:20}, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, lock={-2147221419:20}, lock={-2147221419:20}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5194] RET spinlock_check(& list->lock) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __key={-1476132779:0}, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, list={-2147221419:0}, list={-2147221419:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, spinlock_check(& list->lock)={-2147221419:20}, tx_queue={-2147221419:0}] [L5196] CALL __skb_queue_head_init(list) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, list={-2147221419:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5179] struct sk_buff *tmp ; [L5182] tmp = (struct sk_buff *)list [L5183] list->next = tmp [L5184] list->prev = tmp [L5185] list->qlen = 0U VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, list={-2147221419:0}, list={-2147221419:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={-2147221419:0}, tx_queue={-2147221419:0}] [L5196] RET __skb_queue_head_init(list) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __key={-1476132779:0}, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, list={-2147221419:0}, list={-2147221419:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5197] return; VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, list={-2147221419:0}, list={-2147221419:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6183] RET skb_queue_head_init(& tx_queue) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6185] return (0); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \result=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6342] RET, EXPR mod_init() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, mod_init()=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=1, tx_queue={-2147221419:0}] [L6342] ldv_retval_0 = mod_init() [L6343] COND TRUE ldv_retval_0 == 0 [L6344] ldv_state_variable_0 = 3 [L6345] ldv_state_variable_2 = 1 [L6346] ldv_state_variable_3 = 1 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=1, tx_queue={-2147221419:0}] [L6347] CALL ldv_initialize_hdlc_proto_3() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6228] void *tmp ; [L6229] void *tmp___0 ; VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6232] CALL, EXPR ldv_zalloc(3264UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=3264, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5255] void *p ; [L5256] void *tmp ; [L5257] int tmp___0 ; [L5260] tmp___0 = __VERIFIER_nondet_int() [L5261] COND TRUE tmp___0 != 0 [L5262] return ((void *)0); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=3264, \result={0:0}, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, size=3264, tmp___0=1, tx_queue={-2147221419:0}] [L6232] RET, EXPR ldv_zalloc(3264UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(3264UL)={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6232] tmp = ldv_zalloc(3264UL) [L6233] proto_group1 = (struct net_device *)tmp VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tx_queue={-2147221419:0}] [L6234] CALL, EXPR ldv_zalloc(232UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=232, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5255] void *p ; [L5256] void *tmp ; [L5257] int tmp___0 ; [L5260] tmp___0 = __VERIFIER_nondet_int() [L5261] COND TRUE tmp___0 != 0 [L5262] return ((void *)0); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=232, \result={0:0}, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, size=232, tmp___0=1, tx_queue={-2147221419:0}] [L6234] RET, EXPR ldv_zalloc(232UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(232UL)={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tx_queue={-2147221419:0}] [L6234] tmp___0 = ldv_zalloc(232UL) [L6235] proto_group0 = (struct sk_buff *)tmp___0 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0={0:0}, tx_queue={-2147221419:0}] [L6347] RET ldv_initialize_hdlc_proto_3() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=1, tx_queue={-2147221419:0}] [L6351] COND FALSE !(ldv_retval_0 != 0) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=1, tx_queue={-2147221419:0}] [L6318] tmp___6 = __VERIFIER_nondet_int() [L6320] case 0: VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=0, tmp___7=1, tx_queue={-2147221419:0}] [L6321] COND TRUE ldv_state_variable_1 != 0 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=0, tmp___7=1, tx_queue={-2147221419:0}] [L6322] CALL choose_timer_1(ldv_timer_list_1) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, timer={0:0}, tx_queue={-2147221419:0}] [L6244] LDV_IN_INTERRUPT = 2 [L6245] EXPR timer->data [L6245] EXPR timer->function VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, timer={0:0}, timer={0:0}, timer->data=0, timer->function={0:0}, tx_queue={-2147221419:0}] [L6245] CALL (*(timer->function))(timer->data) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6004] struct proto *proto___0 ; [L6005] struct ppp *ppp ; [L6006] struct ppp *tmp ; [L6007] unsigned long flags ; [L6008] raw_spinlock_t *tmp___0 ; [L6011] proto___0 = (struct proto *)arg [L6012] EXPR proto___0->dev VAL [\old(arg)=0, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, arg=0, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto___0={0:0}, proto___0->dev={-2147221419:-3364}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6012] CALL, EXPR get_ppp(proto___0->dev) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, dev={-2147221419:-3364}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5414] struct hdlc_device *tmp ; VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, dev={-2147221419:-3364}, dev={-2147221419:-3364}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5417] CALL, EXPR dev_to_hdlc(dev) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, dev={-2147221419:-3364}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5402] void *tmp ; VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, dev={-2147221419:-3364}, dev={-2147221419:-3364}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5405] CALL, EXPR netdev_priv((struct net_device const *)dev) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, dev={-2147221419:-3364}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5353] return ((void *)dev + 3264U); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \result={-2147221419:-100}, __this_module={0:0}, cp_table={-1610350507:0}, dev={-2147221419:-3364}, dev={-2147221419:-3364}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5405] RET, EXPR netdev_priv((struct net_device const *)dev) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, dev={-2147221419:-3364}, dev={-2147221419:-3364}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, netdev_priv((struct net_device const *)dev)={-2147221419:-100}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5405] tmp = netdev_priv((struct net_device const *)dev) [L5406] return ((struct hdlc_device *)tmp); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \result={-2147221419:-100}, __this_module={0:0}, cp_table={-1610350507:0}, dev={-2147221419:-3364}, dev={-2147221419:-3364}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={-2147221419:-100}, tx_queue={-2147221419:0}] [L5417] RET, EXPR dev_to_hdlc(dev) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, dev={-2147221419:-3364}, dev={-2147221419:-3364}, dev_to_hdlc(dev)={-2147221419:-100}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5417] tmp = dev_to_hdlc(dev) [L5418] EXPR tmp->state [L5418] return ((struct ppp *)tmp->state); [L6012] RET, EXPR get_ppp(proto___0->dev) VAL [\old(arg)=0, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, arg=0, cp_table={-1610350507:0}, get_ppp(proto___0->dev)={-2147221419:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto___0={0:0}, proto___0->dev={-2147221419:-3364}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6012] tmp = get_ppp(proto___0->dev) [L6013] ppp = tmp VAL [\old(arg)=0, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, arg=0, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp={-2147221419:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto___0={0:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={-2147221419:0}, tx_queue={-2147221419:0}] [L6014] CALL, EXPR spinlock_check(& ppp->lock) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, lock={-2147221419:435}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5137] return (& lock->ldv_6338.rlock); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \result={-2147221419:435}, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, lock={-2147221419:435}, lock={-2147221419:435}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6014] RET, EXPR spinlock_check(& ppp->lock) VAL [\old(arg)=0, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, arg=0, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp={-2147221419:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto___0={0:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, spinlock_check(& ppp->lock)={-2147221419:435}, tmp={-2147221419:0}, tx_queue={-2147221419:0}] [L6014] tmp___0 = spinlock_check(& ppp->lock) [L6015] flags = _raw_spin_lock_irqsave(tmp___0) [L6016] proto___0->state [L6017] case 2: VAL [\old(arg)=0, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, arg=0, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp={-2147221419:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto___0={0:0}, proto___0->state=6, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={-2147221419:0}, tmp___0={-2147221419:435}, tx_queue={-2147221419:0}] [L6018] case 3: VAL [\old(arg)=0, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, arg=0, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp={-2147221419:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto___0={0:0}, proto___0->state=6, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={-2147221419:0}, tmp___0={-2147221419:435}, tx_queue={-2147221419:0}] [L6019] case 4: VAL [\old(arg)=0, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, arg=0, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp={-2147221419:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto___0={0:0}, proto___0->state=6, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={-2147221419:0}, tmp___0={-2147221419:435}, tx_queue={-2147221419:0}] [L6020] case 5: [L6028] case 6: [L6029] EXPR proto___0->pid VAL [\old(arg)=0, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, arg=0, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp={-2147221419:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto___0={0:0}, proto___0->pid=0, proto___0->state=6, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={-2147221419:0}, tmp___0={-2147221419:435}, tx_queue={-2147221419:0}] [L6029] COND TRUE (unsigned int )proto___0->pid != 49185U [L6048] CALL spin_unlock_irqrestore(& ppp->lock, flags) VAL [\old(flags)=0, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, lock={-2147221419:435}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6048] RET spin_unlock_irqrestore(& ppp->lock, flags) VAL [\old(arg)=0, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, arg=0, cp_table={-1610350507:0}, flags=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp={-2147221419:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto___0={0:0}, proto___0->state=6, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={-2147221419:0}, tmp___0={-2147221419:435}, tx_queue={-2147221419:0}] [L6049] CALL ppp_tx_flush() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5519] struct sk_buff *skb ; VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5526] CALL, EXPR ldv_skb_dequeue_12(& tx_queue) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, ldv_func_arg1={-2147221419:0}, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6625] struct sk_buff *tmp ; VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, ldv_func_arg1={-2147221419:0}, ldv_func_arg1={-2147221419:0}, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6628] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6839] void *skb ; [L6840] void *tmp___7 ; VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6843] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=248, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5255] void *p ; [L5256] void *tmp ; [L5257] int tmp___0 ; [L5260] tmp___0 = __VERIFIER_nondet_int() [L5261] COND FALSE !(tmp___0 != 0) [L5264] EXPR, FCALL calloc(1UL, size) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=248, __this_module={0:0}, calloc(1UL, size)={-1476132779:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, size=248, tmp___0=0, tx_queue={-2147221419:0}] [L5264] tmp = calloc(1UL, size) [L5265] p = tmp [L5267] return (p); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=248, \result={-1476132779:0}, __this_module={0:0}, calloc(1UL, size)={-1476132779:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, p={-1476132779:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, size=248, tmp={-1476132779:0}, tmp___0=0, tx_queue={-2147221419:0}] [L6843] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(sizeof(struct sk_buff___0 ))={-1476132779:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6843] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L6844] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, skb={-1476132779:0}, tmp___7={-1476132779:0}, tx_queue={-2147221419:0}] [L6845] COND FALSE !(! skb) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, skb={-1476132779:0}, tmp___7={-1476132779:0}, tx_queue={-2147221419:0}] [L6848] CALL ldv_set_add(LDV_SKBS, skb) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, e={-1476132779:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6694] int i ; [L6697] i = 0 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, e={-1476132779:0}, e={-1476132779:0}, i=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6698] COND TRUE 1 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, e={-1476132779:0}, e={-1476132779:0}, i=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6699] COND FALSE !(i < last_index) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, e={-1476132779:0}, e={-1476132779:0}, i=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6711] COND TRUE last_index < 15 [L6712] set_impl[last_index] = e [L6713] last_index = last_index + 1 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, e={-1476132779:0}, e={-1476132779:0}, i=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6848] RET ldv_set_add(LDV_SKBS, skb) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, skb={-1476132779:0}, tmp___7={-1476132779:0}, tx_queue={-2147221419:0}] [L6849] return (skb); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \result={-1476132779:0}, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, skb={-1476132779:0}, tmp___7={-1476132779:0}, tx_queue={-2147221419:0}] [L6628] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, ldv_func_arg1={-2147221419:0}, ldv_func_arg1={-2147221419:0}, LDV_IN_INTERRUPT=2, ldv_retval_0=0, ldv_skb_alloc()={-1476132779:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6628] tmp = ldv_skb_alloc() [L6629] return (tmp); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \result={-1476132779:0}, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, ldv_func_arg1={-2147221419:0}, ldv_func_arg1={-2147221419:0}, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={-1476132779:0}, tx_queue={-2147221419:0}] [L5526] RET, EXPR ldv_skb_dequeue_12(& tx_queue) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, ldv_skb_dequeue_12(& tx_queue)={-1476132779:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5526] skb = ldv_skb_dequeue_12(& tx_queue) [L5527] COND TRUE (unsigned long )skb != (unsigned long )((struct sk_buff *)0) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, skb={-1476132779:0}, tx_queue={-2147221419:0}] [L5526] CALL, EXPR ldv_skb_dequeue_12(& tx_queue) VAL [\old(last_index)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, ldv_func_arg1={-2147221419:0}, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6625] struct sk_buff *tmp ; VAL [\old(last_index)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, ldv_func_arg1={-2147221419:0}, ldv_func_arg1={-2147221419:0}, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6628] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6839] void *skb ; [L6840] void *tmp___7 ; VAL [\old(last_index)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6843] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=248, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5255] void *p ; [L5256] void *tmp ; [L5257] int tmp___0 ; [L5260] tmp___0 = __VERIFIER_nondet_int() [L5261] COND TRUE tmp___0 != 0 [L5262] return ((void *)0); VAL [\old(last_index)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=248, \result={0:0}, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, size=248, tmp___0=1, tx_queue={-2147221419:0}] [L6843] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(sizeof(struct sk_buff___0 ))={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6843] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L6844] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, skb={0:0}, tmp___7={0:0}, tx_queue={-2147221419:0}] [L6845] COND TRUE ! skb [L6846] return ((void *)0); VAL [\old(last_index)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \result={0:0}, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, skb={0:0}, tmp___7={0:0}, tx_queue={-2147221419:0}] [L6628] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, ldv_func_arg1={-2147221419:0}, ldv_func_arg1={-2147221419:0}, LDV_IN_INTERRUPT=2, ldv_retval_0=0, ldv_skb_alloc()={0:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6628] tmp = ldv_skb_alloc() [L6629] return (tmp); VAL [\old(last_index)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \result={0:0}, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, ldv_func_arg1={-2147221419:0}, ldv_func_arg1={-2147221419:0}, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tx_queue={-2147221419:0}] [L5526] RET, EXPR ldv_skb_dequeue_12(& tx_queue) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, ldv_skb_dequeue_12(& tx_queue)={0:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, skb={-1476132779:0}, tx_queue={-2147221419:0}] [L5526] skb = ldv_skb_dequeue_12(& tx_queue) [L5527] COND FALSE !((unsigned long )skb != (unsigned long )((struct sk_buff *)0)) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, skb={0:0}, tx_queue={-2147221419:0}] [L6049] RET ppp_tx_flush() VAL [\old(arg)=0, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, arg=0, cp_table={-1610350507:0}, flags=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp={-2147221419:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto___0={0:0}, proto___0->state=6, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={-2147221419:0}, tmp___0={-2147221419:435}, tx_queue={-2147221419:0}] [L6245] RET (*(timer->function))(timer->data) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, timer={0:0}, timer={0:0}, timer->data=0, timer->function={0:0}, tx_queue={-2147221419:0}] [L6246] LDV_IN_INTERRUPT = 1 [L6247] ldv_timer_state_1 = 2 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, timer={0:0}, timer={0:0}, tx_queue={-2147221419:0}] [L6322] RET choose_timer_1(ldv_timer_list_1) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=0, tmp___7=1, tx_queue={-2147221419:0}] [L6318] tmp___6 = __VERIFIER_nondet_int() [L6320] case 0: [L6327] case 1: VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=1, tx_queue={-2147221419:0}] [L6328] COND TRUE ldv_state_variable_0 != 0 [L6329] tmp___7 = __VERIFIER_nondet_int() [L6331] case 0: VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=0, tx_queue={-2147221419:0}] [L6332] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=0, tx_queue={-2147221419:0}] [L6333] CALL mod_exit() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6333] RET mod_exit() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=0, tx_queue={-2147221419:0}] [L6334] ldv_state_variable_0 = 2 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=0, tx_queue={-2147221419:0}] [L6574] CALL ldv_check_final_state() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6916] int tmp___7 ; VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6919] CALL, EXPR ldv_set_is_empty(LDV_SKBS) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6790] return (last_index == 0); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \result=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6919] RET, EXPR ldv_set_is_empty(LDV_SKBS) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_set_is_empty(LDV_SKBS)=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6919] tmp___7 = ldv_set_is_empty(LDV_SKBS) [L6920] COND FALSE !(\read(tmp___7)) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp___7=0, tx_queue={-2147221419:0}] [L6923] CALL ldv_error() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5304] __VERIFIER_error() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] ----- [2018-11-23 13:41:17,883 INFO L145 WitnessManager]: Wrote witness to /tmp/vcloud-vcloud-master/worker/working_dir_b31c0f00-21c6-43a6-8b90-ca14128f78df/bin-2019/utaipan/witness.graphml [2018-11-23 13:41:17,883 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-23 13:41:17,883 INFO L168 Benchmark]: Toolchain (without parser) took 94177.19 ms. Allocated memory was 1.0 GB in the beginning and 1.7 GB in the end (delta: 634.4 MB). Free memory was 939.0 MB in the beginning and 1.1 GB in the end (delta: -203.6 MB). Peak memory consumption was 780.4 MB. Max. memory is 11.5 GB. [2018-11-23 13:41:17,884 INFO L168 Benchmark]: CDTParser took 0.13 ms. Allocated memory is still 1.0 GB. Free memory is still 978.7 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 13:41:17,884 INFO L168 Benchmark]: CACSL2BoogieTranslator took 1231.35 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 182.5 MB). Free memory was 939.0 MB in the beginning and 1.1 GB in the end (delta: -155.9 MB). Peak memory consumption was 115.3 MB. Max. memory is 11.5 GB. [2018-11-23 13:41:17,885 INFO L168 Benchmark]: Boogie Procedure Inliner took 53.14 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 5.5 MB). Peak memory consumption was 5.5 MB. Max. memory is 11.5 GB. [2018-11-23 13:41:17,885 INFO L168 Benchmark]: Boogie Preprocessor took 107.65 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 10.9 MB). Peak memory consumption was 10.9 MB. Max. memory is 11.5 GB. [2018-11-23 13:41:17,885 INFO L168 Benchmark]: RCFGBuilder took 6287.28 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 856.3 MB in the end (delta: 222.2 MB). Peak memory consumption was 222.2 MB. Max. memory is 11.5 GB. [2018-11-23 13:41:17,885 INFO L168 Benchmark]: TraceAbstraction took 34594.18 ms. Allocated memory was 1.2 GB in the beginning and 1.7 GB in the end (delta: 440.9 MB). Free memory was 856.3 MB in the beginning and 898.4 MB in the end (delta: -42.1 MB). Peak memory consumption was 398.9 MB. Max. memory is 11.5 GB. [2018-11-23 13:41:17,885 INFO L168 Benchmark]: Witness Printer took 51900.40 ms. Allocated memory was 1.7 GB in the beginning and 1.7 GB in the end (delta: 11.0 MB). Free memory was 898.4 MB in the beginning and 1.1 GB in the end (delta: -244.2 MB). Peak memory consumption was 116.3 MB. Max. memory is 11.5 GB. [2018-11-23 13:41:17,887 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.13 ms. Allocated memory is still 1.0 GB. Free memory is still 978.7 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 1231.35 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 182.5 MB). Free memory was 939.0 MB in the beginning and 1.1 GB in the end (delta: -155.9 MB). Peak memory consumption was 115.3 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 53.14 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 5.5 MB). Peak memory consumption was 5.5 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 107.65 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 10.9 MB). Peak memory consumption was 10.9 MB. Max. memory is 11.5 GB. * RCFGBuilder took 6287.28 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 856.3 MB in the end (delta: 222.2 MB). Peak memory consumption was 222.2 MB. Max. memory is 11.5 GB. * TraceAbstraction took 34594.18 ms. Allocated memory was 1.2 GB in the beginning and 1.7 GB in the end (delta: 440.9 MB). Free memory was 856.3 MB in the beginning and 898.4 MB in the end (delta: -42.1 MB). Peak memory consumption was 398.9 MB. Max. memory is 11.5 GB. * Witness Printer took 51900.40 ms. Allocated memory was 1.7 GB in the beginning and 1.7 GB in the end (delta: 11.0 MB). Free memory was 898.4 MB in the beginning and 1.1 GB in the end (delta: -244.2 MB). Peak memory consumption was 116.3 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~hdlc_proto?open~*((*net_device ) : INT)?close~*((*net_device ) : VOID)?start~*((*net_device ) : VOID)?stop~*((*net_device ) : VOID)?detach~*((*net_device ) : VOID)?ioctl~*((*net_device *ifreq ) : INT)?type_trans~*((*sk_buff *net_device ) : ~__be16~0)?netif_rx~*((*sk_buff ) : INT)?xmit~*((*sk_buff *net_device ) : ~netdev_tx_t~0)?module~*module?next~*hdlc_proto# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType ARRAY#_unrecognizedDimensions_~~Element~0# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~sk_buff_head?next~*sk_buff?prev~*sk_buff?qlen~~__u32~0?lock~~spinlock_t~0# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType ARRAY#_unrecognizedDimensions_~~Element~0# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~header_ops?create~*((*sk_buff *net_device USHORT *VOID *VOID UINT ) : INT)?parse~*((*sk_buff *UCHAR ) : INT)?rebuild~*((*sk_buff ) : INT)?cache~*((*neighbour *hh_cache ~__be16~0 ) : INT)?cache_update~*((*hh_cache *net_device *UCHAR ) : VOID)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *VOID - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType ARRAY#_unrecognizedDimensions_~ARRAY#_unrecognizedDimensions_~INT## - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~sk_buff_head?next~*sk_buff?prev~*sk_buff?qlen~~__u32~0?lock~~spinlock_t~0# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~header_ops?create~*((*sk_buff *net_device USHORT *VOID *VOID UINT ) : INT)?parse~*((*sk_buff *UCHAR ) : INT)?rebuild~*((*sk_buff ) : INT)?cache~*((*neighbour *hh_cache ~__be16~0 ) : INT)?cache_update~*((*hh_cache *net_device *UCHAR ) : VOID)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~hdlc_proto?open~*((*net_device ) : INT)?close~*((*net_device ) : VOID)?start~*((*net_device ) : VOID)?stop~*((*net_device ) : VOID)?detach~*((*net_device ) : VOID)?ioctl~*((*net_device *ifreq ) : INT)?type_trans~*((*sk_buff *net_device ) : ~__be16~0)?netif_rx~*((*sk_buff ) : INT)?xmit~*((*sk_buff *net_device ) : ~netdev_tx_t~0)?module~*module?next~*hdlc_proto# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType ARRAY#_unrecognizedDimensions_~ARRAY#_unrecognizedDimensions_~INT## - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *VOID - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch199 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch199 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch199 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch199 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch199 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch199 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *VOID - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *VOID - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~sk_buff_head?next~*sk_buff?prev~*sk_buff?qlen~~__u32~0?lock~~spinlock_t~0# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType ARRAY#_unrecognizedDimensions_~ARRAY#_unrecognizedDimensions_~INT## - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~sk_buff_head?next~*sk_buff?prev~*sk_buff?qlen~~__u32~0?lock~~spinlock_t~0# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~header_ops?create~*((*sk_buff *net_device USHORT *VOID *VOID UINT ) : INT)?parse~*((*sk_buff *UCHAR ) : INT)?rebuild~*((*sk_buff ) : INT)?cache~*((*neighbour *hh_cache ~__be16~0 ) : INT)?cache_update~*((*hh_cache *net_device *UCHAR ) : VOID)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~hdlc_proto?open~*((*net_device ) : INT)?close~*((*net_device ) : VOID)?start~*((*net_device ) : VOID)?stop~*((*net_device ) : VOID)?detach~*((*net_device ) : VOID)?ioctl~*((*net_device *ifreq ) : INT)?type_trans~*((*sk_buff *net_device ) : ~__be16~0)?netif_rx~*((*sk_buff ) : INT)?xmit~*((*sk_buff *net_device ) : ~netdev_tx_t~0)?module~*module?next~*hdlc_proto# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType ARRAY#_unrecognizedDimensions_~~Element~0# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~header_ops?create~*((*sk_buff *net_device USHORT *VOID *VOID UINT ) : INT)?parse~*((*sk_buff *UCHAR ) : INT)?rebuild~*((*sk_buff ) : INT)?cache~*((*neighbour *hh_cache ~__be16~0 ) : INT)?cache_update~*((*hh_cache *net_device *UCHAR ) : VOID)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~hdlc_proto?open~*((*net_device ) : INT)?close~*((*net_device ) : VOID)?start~*((*net_device ) : VOID)?stop~*((*net_device ) : VOID)?detach~*((*net_device ) : VOID)?ioctl~*((*net_device *ifreq ) : INT)?type_trans~*((*sk_buff *net_device ) : ~__be16~0)?netif_rx~*((*sk_buff ) : INT)?xmit~*((*sk_buff *net_device ) : ~netdev_tx_t~0)?module~*module?next~*hdlc_proto# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType ARRAY#_unrecognizedDimensions_~ARRAY#_unrecognizedDimensions_~INT## - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType ARRAY#_unrecognizedDimensions_~~Element~0# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch199 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch199 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch199 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch199 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch199 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch199 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch255 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch253 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *timer_list - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *net_device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType *sk_buff * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - CounterExampleResult [Line: 5304]: a call of __VERIFIER_error() is reachable a call of __VERIFIER_error() is reachable We found a FailurePath: [L5333] int LDV_IN_INTERRUPT = 1; [L5335] int ldv_state_variable_0 ; [L5336] int ldv_state_variable_3 ; [L5337] int ldv_timer_state_1 = 0; [L5338] int ldv_state_variable_2 ; [L5340] int ref_cnt ; [L5341] int ldv_state_variable_1 ; [L5595-L5621] static int cp_table[13U][7U] = { { 163, 16, 16, 16, 16, 16, 16}, { 16, 0, 0, 0, 0, 0, 0}, { 16, 16, 1026, 131, 131, 133, 16}, { 16, 16, 1, 1, 1, 1, 16}, { 2048, 421, 2, 261, 262, 261, 389}, { 2048, 675, 2, 515, 516, 515, 643}, { 2048, 2049, 2, 36, 131, 6, 131}, { 2048, 2049, 2, 163, 131, 165, 131}, { 2048, 2049, 2050, 2051, 2051, 2051, 2114}, { 0, 1, 1, 3, 3, 5, 131}, { 4096, 4097, 4098, 4099, 4100, 4101, 4102}, { 0, 1, 2, 3, 3, 5, 6}, { 0, 1, 1, 1, 1, 1, 1058}}; [L6197] int ldv_retval_0 ; [L6679] int last_index = 0; [L5334] struct net_device *proto_group1 ; [L5339] struct sk_buff *proto_group0 ; [L5342] struct timer_list *ldv_timer_list_1 ; [L5410] static struct sk_buff_head tx_queue ; [L6104-L6106] static struct hdlc_proto proto = {0, & ppp_close, & ppp_start, & ppp_stop, 0, & ppp_ioctl, & ppp_type_trans, & ppp_rx, 0, & __this_module, 0}; [L6107] static struct header_ops const ppp_header_ops = {& ppp_hard_header, 0, 0, 0, 0}; [L6678] Element set_impl[15] ; [L6836] Set LDV_SKBS ; VAL [\old(cp_table)=null, \old(cp_table)=null, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_retval_0)=0, \old(LDV_SKBS)=null, \old(LDV_SKBS)=null, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(ppp_header_ops)=null, \old(ppp_header_ops)=null, \old(proto)=null, \old(proto)=null, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(set_impl)=null, \old(set_impl)=null, \old(tx_queue)=null, \old(tx_queue)=null, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6277] struct ifreq *ldvarg0 ; [L6278] void *tmp ; [L6279] unsigned int ldvarg1 ; [L6280] unsigned int tmp___0 ; [L6281] unsigned short ldvarg4 ; [L6282] unsigned short tmp___1 ; [L6283] struct sk_buff *ldvarg3 ; [L6284] void *tmp___2 ; [L6285] struct net_device *ldvarg5 ; [L6286] void *tmp___3 ; [L6287] void *ldvarg2 ; [L6288] void *tmp___4 ; [L6289] void *ldvarg6 ; [L6290] void *tmp___5 ; [L6291] int tmp___6 ; [L6292] int tmp___7 ; [L6293] int tmp___8 ; [L6294] int tmp___9 ; VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6297] CALL, EXPR ldv_zalloc(40UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=40, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5255] void *p ; [L5256] void *tmp ; [L5257] int tmp___0 ; [L5260] tmp___0 = __VERIFIER_nondet_int() [L5261] COND TRUE tmp___0 != 0 [L5262] return ((void *)0); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=40, \result={0:0}, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, size=40, tmp___0=1, tx_queue={-2147221419:0}] [L6297] RET, EXPR ldv_zalloc(40UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(40UL)={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6297] tmp = ldv_zalloc(40UL) [L6298] ldvarg0 = (struct ifreq *)tmp [L6299] tmp___0 = __VERIFIER_nondet_uint() [L6300] ldvarg1 = tmp___0 [L6301] tmp___1 = __VERIFIER_nondet_ushort() [L6302] ldvarg4 = tmp___1 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=0, ldvarg4=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tx_queue={-2147221419:0}] [L6303] CALL, EXPR ldv_zalloc(232UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=232, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5255] void *p ; [L5256] void *tmp ; [L5257] int tmp___0 ; [L5260] tmp___0 = __VERIFIER_nondet_int() [L5261] COND TRUE tmp___0 != 0 [L5262] return ((void *)0); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=232, \result={0:0}, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, size=232, tmp___0=1, tx_queue={-2147221419:0}] [L6303] RET, EXPR ldv_zalloc(232UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(232UL)={0:0}, ldvarg0={0:0}, ldvarg1=0, ldvarg4=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tx_queue={-2147221419:0}] [L6303] tmp___2 = ldv_zalloc(232UL) [L6304] ldvarg3 = (struct sk_buff *)tmp___2 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=0, ldvarg3={0:0}, ldvarg4=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tx_queue={-2147221419:0}] [L6305] CALL, EXPR ldv_zalloc(3264UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=3264, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5255] void *p ; [L5256] void *tmp ; [L5257] int tmp___0 ; [L5260] tmp___0 = __VERIFIER_nondet_int() [L5261] COND TRUE tmp___0 != 0 [L5262] return ((void *)0); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=3264, \result={0:0}, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, size=3264, tmp___0=1, tx_queue={-2147221419:0}] [L6305] RET, EXPR ldv_zalloc(3264UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(3264UL)={0:0}, ldvarg0={0:0}, ldvarg1=0, ldvarg3={0:0}, ldvarg4=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tx_queue={-2147221419:0}] [L6305] tmp___3 = ldv_zalloc(3264UL) [L6306] ldvarg5 = (struct net_device *)tmp___3 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=0, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tx_queue={-2147221419:0}] [L6307] CALL, EXPR ldv_zalloc(1UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=1, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5255] void *p ; [L5256] void *tmp ; [L5257] int tmp___0 ; [L5260] tmp___0 = __VERIFIER_nondet_int() [L5261] COND TRUE tmp___0 != 0 [L5262] return ((void *)0); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=1, \result={0:0}, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, size=1, tmp___0=1, tx_queue={-2147221419:0}] [L6307] RET, EXPR ldv_zalloc(1UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=0, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tx_queue={-2147221419:0}] [L6307] tmp___4 = ldv_zalloc(1UL) [L6308] ldvarg2 = tmp___4 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tx_queue={-2147221419:0}] [L6309] CALL, EXPR ldv_zalloc(1UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=1, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5255] void *p ; [L5256] void *tmp ; [L5257] int tmp___0 ; [L5260] tmp___0 = __VERIFIER_nondet_int() [L5261] COND TRUE tmp___0 != 0 [L5262] return ((void *)0); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=1, \result={0:0}, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, size=1, tmp___0=1, tx_queue={-2147221419:0}] [L6309] RET, EXPR ldv_zalloc(1UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tx_queue={-2147221419:0}] [L6309] tmp___5 = ldv_zalloc(1UL) [L6310] ldvarg6 = tmp___5 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tx_queue={-2147221419:0}] [L6311] CALL ldv_initialize() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6858] CALL ldv_set_init(LDV_SKBS) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6686] set = set_impl [L6687] last_index = 0 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set={-2147483579:0}, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6858] RET ldv_set_init(LDV_SKBS) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6311] RET ldv_initialize() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tx_queue={-2147221419:0}] [L6312] ldv_state_variable_1 = 1 [L6313] ref_cnt = 0 [L6314] ldv_state_variable_0 = 1 [L6315] ldv_state_variable_3 = 0 [L6316] ldv_state_variable_2 = 0 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tx_queue={-2147221419:0}] [L6318] tmp___6 = __VERIFIER_nondet_int() [L6320] case 0: [L6327] case 1: VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tx_queue={-2147221419:0}] [L6328] COND TRUE ldv_state_variable_0 != 0 [L6329] tmp___7 = __VERIFIER_nondet_int() [L6331] case 0: [L6340] case 1: VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=1, tx_queue={-2147221419:0}] [L6341] COND TRUE ldv_state_variable_0 == 1 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=1, tx_queue={-2147221419:0}] [L6342] CALL, EXPR mod_init() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6183] CALL skb_queue_head_init(& tx_queue) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, list={-2147221419:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5191] struct lock_class_key __key ; VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __key={-1476132779:0}, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, list={-2147221419:0}, list={-2147221419:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5194] CALL spinlock_check(& list->lock) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, lock={-2147221419:20}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5137] return (& lock->ldv_6338.rlock); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \result={-2147221419:20}, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, lock={-2147221419:20}, lock={-2147221419:20}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5194] RET spinlock_check(& list->lock) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __key={-1476132779:0}, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, list={-2147221419:0}, list={-2147221419:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, spinlock_check(& list->lock)={-2147221419:20}, tx_queue={-2147221419:0}] [L5196] CALL __skb_queue_head_init(list) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, list={-2147221419:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5179] struct sk_buff *tmp ; [L5182] tmp = (struct sk_buff *)list [L5183] list->next = tmp [L5184] list->prev = tmp [L5185] list->qlen = 0U VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, list={-2147221419:0}, list={-2147221419:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={-2147221419:0}, tx_queue={-2147221419:0}] [L5196] RET __skb_queue_head_init(list) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __key={-1476132779:0}, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, list={-2147221419:0}, list={-2147221419:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5197] return; VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, list={-2147221419:0}, list={-2147221419:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6183] RET skb_queue_head_init(& tx_queue) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6185] return (0); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \result=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6342] RET, EXPR mod_init() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, mod_init()=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=1, tx_queue={-2147221419:0}] [L6342] ldv_retval_0 = mod_init() [L6343] COND TRUE ldv_retval_0 == 0 [L6344] ldv_state_variable_0 = 3 [L6345] ldv_state_variable_2 = 1 [L6346] ldv_state_variable_3 = 1 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=1, tx_queue={-2147221419:0}] [L6347] CALL ldv_initialize_hdlc_proto_3() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6228] void *tmp ; [L6229] void *tmp___0 ; VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6232] CALL, EXPR ldv_zalloc(3264UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=3264, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5255] void *p ; [L5256] void *tmp ; [L5257] int tmp___0 ; [L5260] tmp___0 = __VERIFIER_nondet_int() [L5261] COND TRUE tmp___0 != 0 [L5262] return ((void *)0); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=3264, \result={0:0}, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, size=3264, tmp___0=1, tx_queue={-2147221419:0}] [L6232] RET, EXPR ldv_zalloc(3264UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(3264UL)={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6232] tmp = ldv_zalloc(3264UL) [L6233] proto_group1 = (struct net_device *)tmp VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tx_queue={-2147221419:0}] [L6234] CALL, EXPR ldv_zalloc(232UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=232, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5255] void *p ; [L5256] void *tmp ; [L5257] int tmp___0 ; [L5260] tmp___0 = __VERIFIER_nondet_int() [L5261] COND TRUE tmp___0 != 0 [L5262] return ((void *)0); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=232, \result={0:0}, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, size=232, tmp___0=1, tx_queue={-2147221419:0}] [L6234] RET, EXPR ldv_zalloc(232UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(232UL)={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tx_queue={-2147221419:0}] [L6234] tmp___0 = ldv_zalloc(232UL) [L6235] proto_group0 = (struct sk_buff *)tmp___0 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0={0:0}, tx_queue={-2147221419:0}] [L6347] RET ldv_initialize_hdlc_proto_3() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=1, tx_queue={-2147221419:0}] [L6351] COND FALSE !(ldv_retval_0 != 0) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=1, tx_queue={-2147221419:0}] [L6318] tmp___6 = __VERIFIER_nondet_int() [L6320] case 0: VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=0, tmp___7=1, tx_queue={-2147221419:0}] [L6321] COND TRUE ldv_state_variable_1 != 0 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=0, tmp___7=1, tx_queue={-2147221419:0}] [L6322] CALL choose_timer_1(ldv_timer_list_1) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, timer={0:0}, tx_queue={-2147221419:0}] [L6244] LDV_IN_INTERRUPT = 2 [L6245] EXPR timer->data [L6245] EXPR timer->function VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, timer={0:0}, timer={0:0}, timer->data=0, timer->function={0:0}, tx_queue={-2147221419:0}] [L6245] CALL (*(timer->function))(timer->data) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6004] struct proto *proto___0 ; [L6005] struct ppp *ppp ; [L6006] struct ppp *tmp ; [L6007] unsigned long flags ; [L6008] raw_spinlock_t *tmp___0 ; [L6011] proto___0 = (struct proto *)arg [L6012] EXPR proto___0->dev VAL [\old(arg)=0, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, arg=0, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto___0={0:0}, proto___0->dev={-2147221419:-3364}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6012] CALL, EXPR get_ppp(proto___0->dev) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, dev={-2147221419:-3364}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5414] struct hdlc_device *tmp ; VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, dev={-2147221419:-3364}, dev={-2147221419:-3364}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5417] CALL, EXPR dev_to_hdlc(dev) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, dev={-2147221419:-3364}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5402] void *tmp ; VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, dev={-2147221419:-3364}, dev={-2147221419:-3364}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5405] CALL, EXPR netdev_priv((struct net_device const *)dev) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, dev={-2147221419:-3364}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5353] return ((void *)dev + 3264U); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \result={-2147221419:-100}, __this_module={0:0}, cp_table={-1610350507:0}, dev={-2147221419:-3364}, dev={-2147221419:-3364}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5405] RET, EXPR netdev_priv((struct net_device const *)dev) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, dev={-2147221419:-3364}, dev={-2147221419:-3364}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, netdev_priv((struct net_device const *)dev)={-2147221419:-100}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5405] tmp = netdev_priv((struct net_device const *)dev) [L5406] return ((struct hdlc_device *)tmp); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \result={-2147221419:-100}, __this_module={0:0}, cp_table={-1610350507:0}, dev={-2147221419:-3364}, dev={-2147221419:-3364}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={-2147221419:-100}, tx_queue={-2147221419:0}] [L5417] RET, EXPR dev_to_hdlc(dev) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, dev={-2147221419:-3364}, dev={-2147221419:-3364}, dev_to_hdlc(dev)={-2147221419:-100}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5417] tmp = dev_to_hdlc(dev) [L5418] EXPR tmp->state [L5418] return ((struct ppp *)tmp->state); [L6012] RET, EXPR get_ppp(proto___0->dev) VAL [\old(arg)=0, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, arg=0, cp_table={-1610350507:0}, get_ppp(proto___0->dev)={-2147221419:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto___0={0:0}, proto___0->dev={-2147221419:-3364}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6012] tmp = get_ppp(proto___0->dev) [L6013] ppp = tmp VAL [\old(arg)=0, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, arg=0, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp={-2147221419:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto___0={0:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={-2147221419:0}, tx_queue={-2147221419:0}] [L6014] CALL, EXPR spinlock_check(& ppp->lock) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, lock={-2147221419:435}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5137] return (& lock->ldv_6338.rlock); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \result={-2147221419:435}, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, lock={-2147221419:435}, lock={-2147221419:435}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6014] RET, EXPR spinlock_check(& ppp->lock) VAL [\old(arg)=0, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, arg=0, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp={-2147221419:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto___0={0:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, spinlock_check(& ppp->lock)={-2147221419:435}, tmp={-2147221419:0}, tx_queue={-2147221419:0}] [L6014] tmp___0 = spinlock_check(& ppp->lock) [L6015] flags = _raw_spin_lock_irqsave(tmp___0) [L6016] proto___0->state [L6017] case 2: VAL [\old(arg)=0, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, arg=0, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp={-2147221419:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto___0={0:0}, proto___0->state=6, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={-2147221419:0}, tmp___0={-2147221419:435}, tx_queue={-2147221419:0}] [L6018] case 3: VAL [\old(arg)=0, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, arg=0, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp={-2147221419:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto___0={0:0}, proto___0->state=6, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={-2147221419:0}, tmp___0={-2147221419:435}, tx_queue={-2147221419:0}] [L6019] case 4: VAL [\old(arg)=0, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, arg=0, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp={-2147221419:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto___0={0:0}, proto___0->state=6, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={-2147221419:0}, tmp___0={-2147221419:435}, tx_queue={-2147221419:0}] [L6020] case 5: [L6028] case 6: [L6029] EXPR proto___0->pid VAL [\old(arg)=0, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, arg=0, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp={-2147221419:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto___0={0:0}, proto___0->pid=0, proto___0->state=6, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={-2147221419:0}, tmp___0={-2147221419:435}, tx_queue={-2147221419:0}] [L6029] COND TRUE (unsigned int )proto___0->pid != 49185U [L6048] CALL spin_unlock_irqrestore(& ppp->lock, flags) VAL [\old(flags)=0, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, lock={-2147221419:435}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6048] RET spin_unlock_irqrestore(& ppp->lock, flags) VAL [\old(arg)=0, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, arg=0, cp_table={-1610350507:0}, flags=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp={-2147221419:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto___0={0:0}, proto___0->state=6, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={-2147221419:0}, tmp___0={-2147221419:435}, tx_queue={-2147221419:0}] [L6049] CALL ppp_tx_flush() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5519] struct sk_buff *skb ; VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5526] CALL, EXPR ldv_skb_dequeue_12(& tx_queue) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, ldv_func_arg1={-2147221419:0}, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6625] struct sk_buff *tmp ; VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, ldv_func_arg1={-2147221419:0}, ldv_func_arg1={-2147221419:0}, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6628] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6839] void *skb ; [L6840] void *tmp___7 ; VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6843] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=248, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5255] void *p ; [L5256] void *tmp ; [L5257] int tmp___0 ; [L5260] tmp___0 = __VERIFIER_nondet_int() [L5261] COND FALSE !(tmp___0 != 0) [L5264] EXPR, FCALL calloc(1UL, size) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=248, __this_module={0:0}, calloc(1UL, size)={-1476132779:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, size=248, tmp___0=0, tx_queue={-2147221419:0}] [L5264] tmp = calloc(1UL, size) [L5265] p = tmp [L5267] return (p); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=248, \result={-1476132779:0}, __this_module={0:0}, calloc(1UL, size)={-1476132779:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, p={-1476132779:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, size=248, tmp={-1476132779:0}, tmp___0=0, tx_queue={-2147221419:0}] [L6843] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(sizeof(struct sk_buff___0 ))={-1476132779:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6843] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L6844] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, skb={-1476132779:0}, tmp___7={-1476132779:0}, tx_queue={-2147221419:0}] [L6845] COND FALSE !(! skb) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, skb={-1476132779:0}, tmp___7={-1476132779:0}, tx_queue={-2147221419:0}] [L6848] CALL ldv_set_add(LDV_SKBS, skb) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, e={-1476132779:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6694] int i ; [L6697] i = 0 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, e={-1476132779:0}, e={-1476132779:0}, i=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6698] COND TRUE 1 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, e={-1476132779:0}, e={-1476132779:0}, i=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6699] COND FALSE !(i < last_index) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, e={-1476132779:0}, e={-1476132779:0}, i=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6711] COND TRUE last_index < 15 [L6712] set_impl[last_index] = e [L6713] last_index = last_index + 1 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, e={-1476132779:0}, e={-1476132779:0}, i=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6848] RET ldv_set_add(LDV_SKBS, skb) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, skb={-1476132779:0}, tmp___7={-1476132779:0}, tx_queue={-2147221419:0}] [L6849] return (skb); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \result={-1476132779:0}, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, skb={-1476132779:0}, tmp___7={-1476132779:0}, tx_queue={-2147221419:0}] [L6628] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, ldv_func_arg1={-2147221419:0}, ldv_func_arg1={-2147221419:0}, LDV_IN_INTERRUPT=2, ldv_retval_0=0, ldv_skb_alloc()={-1476132779:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6628] tmp = ldv_skb_alloc() [L6629] return (tmp); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \result={-1476132779:0}, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, ldv_func_arg1={-2147221419:0}, ldv_func_arg1={-2147221419:0}, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={-1476132779:0}, tx_queue={-2147221419:0}] [L5526] RET, EXPR ldv_skb_dequeue_12(& tx_queue) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, ldv_skb_dequeue_12(& tx_queue)={-1476132779:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5526] skb = ldv_skb_dequeue_12(& tx_queue) [L5527] COND TRUE (unsigned long )skb != (unsigned long )((struct sk_buff *)0) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, skb={-1476132779:0}, tx_queue={-2147221419:0}] [L5526] CALL, EXPR ldv_skb_dequeue_12(& tx_queue) VAL [\old(last_index)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, ldv_func_arg1={-2147221419:0}, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6625] struct sk_buff *tmp ; VAL [\old(last_index)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, ldv_func_arg1={-2147221419:0}, ldv_func_arg1={-2147221419:0}, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6628] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6839] void *skb ; [L6840] void *tmp___7 ; VAL [\old(last_index)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6843] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=248, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5255] void *p ; [L5256] void *tmp ; [L5257] int tmp___0 ; [L5260] tmp___0 = __VERIFIER_nondet_int() [L5261] COND TRUE tmp___0 != 0 [L5262] return ((void *)0); VAL [\old(last_index)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \old(size)=248, \result={0:0}, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, size=248, tmp___0=1, tx_queue={-2147221419:0}] [L6843] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(sizeof(struct sk_buff___0 ))={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6843] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L6844] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, skb={0:0}, tmp___7={0:0}, tx_queue={-2147221419:0}] [L6845] COND TRUE ! skb [L6846] return ((void *)0); VAL [\old(last_index)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \result={0:0}, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, skb={0:0}, tmp___7={0:0}, tx_queue={-2147221419:0}] [L6628] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, ldv_func_arg1={-2147221419:0}, ldv_func_arg1={-2147221419:0}, LDV_IN_INTERRUPT=2, ldv_retval_0=0, ldv_skb_alloc()={0:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6628] tmp = ldv_skb_alloc() [L6629] return (tmp); VAL [\old(last_index)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \result={0:0}, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, ldv_func_arg1={-2147221419:0}, ldv_func_arg1={-2147221419:0}, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tx_queue={-2147221419:0}] [L5526] RET, EXPR ldv_skb_dequeue_12(& tx_queue) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, ldv_skb_dequeue_12(& tx_queue)={0:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, skb={-1476132779:0}, tx_queue={-2147221419:0}] [L5526] skb = ldv_skb_dequeue_12(& tx_queue) [L5527] COND FALSE !((unsigned long )skb != (unsigned long )((struct sk_buff *)0)) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, skb={0:0}, tx_queue={-2147221419:0}] [L6049] RET ppp_tx_flush() VAL [\old(arg)=0, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, arg=0, cp_table={-1610350507:0}, flags=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp={-2147221419:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto___0={0:0}, proto___0->state=6, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={-2147221419:0}, tmp___0={-2147221419:435}, tx_queue={-2147221419:0}] [L6245] RET (*(timer->function))(timer->data) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, timer={0:0}, timer={0:0}, timer->data=0, timer->function={0:0}, tx_queue={-2147221419:0}] [L6246] LDV_IN_INTERRUPT = 1 [L6247] ldv_timer_state_1 = 2 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, timer={0:0}, timer={0:0}, tx_queue={-2147221419:0}] [L6322] RET choose_timer_1(ldv_timer_list_1) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=0, tmp___7=1, tx_queue={-2147221419:0}] [L6318] tmp___6 = __VERIFIER_nondet_int() [L6320] case 0: [L6327] case 1: VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=1, tx_queue={-2147221419:0}] [L6328] COND TRUE ldv_state_variable_0 != 0 [L6329] tmp___7 = __VERIFIER_nondet_int() [L6331] case 0: VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=0, tx_queue={-2147221419:0}] [L6332] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=0, tx_queue={-2147221419:0}] [L6333] CALL mod_exit() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6333] RET mod_exit() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=0, tx_queue={-2147221419:0}] [L6334] ldv_state_variable_0 = 2 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp={0:0}, tmp___0=0, tmp___1=0, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=0, tx_queue={-2147221419:0}] [L6574] CALL ldv_check_final_state() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6916] int tmp___7 ; VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6919] CALL, EXPR ldv_set_is_empty(LDV_SKBS) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6790] return (last_index == 0); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, \result=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6919] RET, EXPR ldv_set_is_empty(LDV_SKBS) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_set_is_empty(LDV_SKBS)=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L6919] tmp___7 = ldv_set_is_empty(LDV_SKBS) [L6920] COND FALSE !(\read(tmp___7)) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tmp___7=0, tx_queue={-2147221419:0}] [L6923] CALL ldv_error() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] [L5304] __VERIFIER_error() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=null, \old(ldv_timer_list_1)=null, \old(ldv_timer_state_1)=0, \old(proto_group0)=null, \old(proto_group0)=null, \old(proto_group1)=null, \old(proto_group1)=null, \old(ref_cnt)=0, __this_module={0:0}, cp_table={-1610350507:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ppp_header_ops={-2147221420:0}, proto={-2147221439:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-2147483579:0}, tx_queue={-2147221419:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 61 procedures, 636 locations, 1 error locations. UNSAFE Result, 34.5s OverallTime, 11 OverallIterations, 9 TraceHistogramMax, 4.0s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 10069 SDtfs, 4299 SDslu, 27378 SDs, 0 SdLazy, 756 SolverSat, 81 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 1.8s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 1528 GetRequests, 1486 SyntacticMatches, 0 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=4706occurred in iteration=10, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 1.2s AutomataMinimizationTime, 10 MinimizatonAttempts, 302 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 0.6s SsaConstructionTime, 4.7s SatisfiabilityAnalysisTime, 1.2s InterpolantComputationTime, 1739 NumberOfCodeBlocks, 1739 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 1517 ConstructedInterpolants, 0 QuantifiedInterpolants, 347058 SizeOfPredicates, 40 NumberOfNonLiveVariables, 8510 ConjunctsInSsa, 87 ConjunctsInUnsatCore, 10 InterpolantComputations, 10 PerfectInterpolantSequences, 1089/1089 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! Received shutdown request...