./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--lapbether.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 839c364b Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d8ab52a-71b1-48e9-a6f6-c4f641158af5/bin/uautomizer-DrprNOufMa/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d8ab52a-71b1-48e9-a6f6-c4f641158af5/bin/uautomizer-DrprNOufMa/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d8ab52a-71b1-48e9-a6f6-c4f641158af5/bin/uautomizer-DrprNOufMa/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d8ab52a-71b1-48e9-a6f6-c4f641158af5/bin/uautomizer-DrprNOufMa/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--lapbether.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d8ab52a-71b1-48e9-a6f6-c4f641158af5/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d8ab52a-71b1-48e9-a6f6-c4f641158af5/bin/uautomizer-DrprNOufMa --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 3c9185451e17cd03a558fe9bd455bfb656de587a9df23cb7cc44d8e38d5b1098 --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-12-06 20:39:31,061 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-06 20:39:31,062 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-06 20:39:31,087 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-06 20:39:31,087 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-06 20:39:31,088 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-06 20:39:31,090 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-06 20:39:31,092 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-06 20:39:31,093 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-06 20:39:31,094 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-06 20:39:31,095 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-06 20:39:31,096 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-06 20:39:31,097 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-06 20:39:31,098 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-06 20:39:31,099 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-06 20:39:31,100 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-06 20:39:31,101 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-06 20:39:31,102 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-06 20:39:31,103 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-06 20:39:31,105 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-06 20:39:31,107 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-06 20:39:31,108 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-06 20:39:31,109 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-06 20:39:31,110 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-06 20:39:31,113 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-06 20:39:31,113 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-06 20:39:31,114 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-06 20:39:31,115 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-06 20:39:31,115 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-06 20:39:31,116 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-06 20:39:31,116 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-06 20:39:31,117 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-06 20:39:31,118 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-06 20:39:31,118 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-06 20:39:31,119 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-06 20:39:31,119 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-06 20:39:31,120 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-06 20:39:31,120 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-06 20:39:31,120 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-06 20:39:31,121 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-06 20:39:31,122 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-06 20:39:31,122 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d8ab52a-71b1-48e9-a6f6-c4f641158af5/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-64bit-Automizer_Default.epf [2021-12-06 20:39:31,141 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-06 20:39:31,141 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-06 20:39:31,141 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-06 20:39:31,141 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-06 20:39:31,142 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-06 20:39:31,142 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-06 20:39:31,143 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-06 20:39:31,143 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-06 20:39:31,143 INFO L138 SettingsManager]: * Use SBE=true [2021-12-06 20:39:31,143 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-06 20:39:31,143 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-06 20:39:31,143 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-06 20:39:31,144 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-06 20:39:31,144 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-06 20:39:31,144 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-06 20:39:31,144 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-06 20:39:31,144 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-06 20:39:31,144 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-06 20:39:31,144 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-06 20:39:31,145 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-06 20:39:31,145 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-06 20:39:31,145 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 20:39:31,145 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-06 20:39:31,145 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-06 20:39:31,145 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-06 20:39:31,145 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-06 20:39:31,146 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-06 20:39:31,146 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-06 20:39:31,146 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-06 20:39:31,146 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-06 20:39:31,146 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-06 20:39:31,146 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d8ab52a-71b1-48e9-a6f6-c4f641158af5/bin/uautomizer-DrprNOufMa/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d8ab52a-71b1-48e9-a6f6-c4f641158af5/bin/uautomizer-DrprNOufMa Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 3c9185451e17cd03a558fe9bd455bfb656de587a9df23cb7cc44d8e38d5b1098 [2021-12-06 20:39:31,323 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-06 20:39:31,341 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-06 20:39:31,343 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-06 20:39:31,344 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-06 20:39:31,344 INFO L275 PluginConnector]: CDTParser initialized [2021-12-06 20:39:31,345 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d8ab52a-71b1-48e9-a6f6-c4f641158af5/bin/uautomizer-DrprNOufMa/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--lapbether.ko-entry_point.cil.out.i [2021-12-06 20:39:31,400 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d8ab52a-71b1-48e9-a6f6-c4f641158af5/bin/uautomizer-DrprNOufMa/data/ba2593739/2a9f870fa1bd4b75a69d3fb332a2c9af/FLAGeb009337e [2021-12-06 20:39:31,975 INFO L306 CDTParser]: Found 1 translation units. [2021-12-06 20:39:31,975 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d8ab52a-71b1-48e9-a6f6-c4f641158af5/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--lapbether.ko-entry_point.cil.out.i [2021-12-06 20:39:31,999 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d8ab52a-71b1-48e9-a6f6-c4f641158af5/bin/uautomizer-DrprNOufMa/data/ba2593739/2a9f870fa1bd4b75a69d3fb332a2c9af/FLAGeb009337e [2021-12-06 20:39:32,395 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d8ab52a-71b1-48e9-a6f6-c4f641158af5/bin/uautomizer-DrprNOufMa/data/ba2593739/2a9f870fa1bd4b75a69d3fb332a2c9af [2021-12-06 20:39:32,402 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-06 20:39:32,406 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-06 20:39:32,410 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-06 20:39:32,411 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-06 20:39:32,421 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-06 20:39:32,423 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 08:39:32" (1/1) ... [2021-12-06 20:39:32,427 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@102480d0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:39:32, skipping insertion in model container [2021-12-06 20:39:32,428 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 08:39:32" (1/1) ... [2021-12-06 20:39:32,452 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-06 20:39:32,544 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 20:39:33,151 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d8ab52a-71b1-48e9-a6f6-c4f641158af5/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--lapbether.ko-entry_point.cil.out.i[174669,174682] [2021-12-06 20:39:33,459 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 20:39:33,477 INFO L203 MainTranslator]: Completed pre-run [2021-12-06 20:39:33,588 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d8ab52a-71b1-48e9-a6f6-c4f641158af5/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--lapbether.ko-entry_point.cil.out.i[174669,174682] [2021-12-06 20:39:33,662 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 20:39:33,712 INFO L208 MainTranslator]: Completed translation [2021-12-06 20:39:33,712 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:39:33 WrapperNode [2021-12-06 20:39:33,712 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-06 20:39:33,714 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-06 20:39:33,714 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-06 20:39:33,714 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-06 20:39:33,719 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:39:33" (1/1) ... [2021-12-06 20:39:33,760 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:39:33" (1/1) ... [2021-12-06 20:39:33,827 INFO L137 Inliner]: procedures = 177, calls = 512, calls flagged for inlining = 97, calls inlined = 94, statements flattened = 1880 [2021-12-06 20:39:33,828 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-06 20:39:33,828 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-06 20:39:33,828 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-06 20:39:33,828 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-06 20:39:33,834 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:39:33" (1/1) ... [2021-12-06 20:39:33,835 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:39:33" (1/1) ... [2021-12-06 20:39:33,847 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:39:33" (1/1) ... [2021-12-06 20:39:33,848 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:39:33" (1/1) ... [2021-12-06 20:39:33,896 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:39:33" (1/1) ... [2021-12-06 20:39:33,911 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:39:33" (1/1) ... [2021-12-06 20:39:33,922 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:39:33" (1/1) ... [2021-12-06 20:39:33,937 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-06 20:39:33,938 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-06 20:39:33,938 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-06 20:39:33,938 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-06 20:39:33,939 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:39:33" (1/1) ... [2021-12-06 20:39:33,946 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 20:39:33,957 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d8ab52a-71b1-48e9-a6f6-c4f641158af5/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:39:33,968 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d8ab52a-71b1-48e9-a6f6-c4f641158af5/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-06 20:39:33,970 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d8ab52a-71b1-48e9-a6f6-c4f641158af5/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-06 20:39:34,008 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2021-12-06 20:39:34,008 INFO L130 BoogieDeclarations]: Found specification of procedure strncmp [2021-12-06 20:39:34,009 INFO L130 BoogieDeclarations]: Found specification of procedure dev_put [2021-12-06 20:39:34,009 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_put [2021-12-06 20:39:34,009 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-12-06 20:39:34,009 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-12-06 20:39:34,009 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_18 [2021-12-06 20:39:34,009 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_18 [2021-12-06 20:39:34,009 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-12-06 20:39:34,009 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-12-06 20:39:34,010 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-12-06 20:39:34,010 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2021-12-06 20:39:34,010 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2021-12-06 20:39:34,010 INFO L130 BoogieDeclarations]: Found specification of procedure skb_headroom [2021-12-06 20:39:34,010 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_headroom [2021-12-06 20:39:34,010 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2021-12-06 20:39:34,010 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2021-12-06 20:39:34,010 INFO L130 BoogieDeclarations]: Found specification of procedure debug_lockdep_rcu_enabled [2021-12-06 20:39:34,010 INFO L138 BoogieDeclarations]: Found implementation of procedure debug_lockdep_rcu_enabled [2021-12-06 20:39:34,011 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_free [2021-12-06 20:39:34,011 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_free [2021-12-06 20:39:34,011 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-12-06 20:39:34,011 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-12-06 20:39:34,011 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_size_call_parameter [2021-12-06 20:39:34,011 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_is_watching [2021-12-06 20:39:34,011 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_is_watching [2021-12-06 20:39:34,011 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_read_lock_held [2021-12-06 20:39:34,011 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_read_lock_held [2021-12-06 20:39:34,012 INFO L130 BoogieDeclarations]: Found specification of procedure lapbeth_disconnected [2021-12-06 20:39:34,012 INFO L138 BoogieDeclarations]: Found implementation of procedure lapbeth_disconnected [2021-12-06 20:39:34,012 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2021-12-06 20:39:34,012 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2021-12-06 20:39:34,012 INFO L130 BoogieDeclarations]: Found specification of procedure lapbeth_data_transmit [2021-12-06 20:39:34,012 INFO L138 BoogieDeclarations]: Found implementation of procedure lapbeth_data_transmit [2021-12-06 20:39:34,012 INFO L130 BoogieDeclarations]: Found specification of procedure lapbeth_data_indication [2021-12-06 20:39:34,012 INFO L138 BoogieDeclarations]: Found implementation of procedure lapbeth_data_indication [2021-12-06 20:39:34,012 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2021-12-06 20:39:34,013 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-12-06 20:39:34,013 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-12-06 20:39:34,013 INFO L130 BoogieDeclarations]: Found specification of procedure skb_pull [2021-12-06 20:39:34,013 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_pull [2021-12-06 20:39:34,013 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-12-06 20:39:34,013 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-12-06 20:39:34,013 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2021-12-06 20:39:34,013 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2021-12-06 20:39:34,013 INFO L130 BoogieDeclarations]: Found specification of procedure lapbeth_set_mac_address [2021-12-06 20:39:34,014 INFO L138 BoogieDeclarations]: Found implementation of procedure lapbeth_set_mac_address [2021-12-06 20:39:34,014 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-12-06 20:39:34,014 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-12-06 20:39:34,014 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-12-06 20:39:34,014 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_free_int [2021-12-06 20:39:34,014 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_free_int [2021-12-06 20:39:34,014 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-06 20:39:34,014 INFO L130 BoogieDeclarations]: Found specification of procedure x25_type_trans [2021-12-06 20:39:34,015 INFO L138 BoogieDeclarations]: Found implementation of procedure x25_type_trans [2021-12-06 20:39:34,015 INFO L130 BoogieDeclarations]: Found specification of procedure dev_net [2021-12-06 20:39:34,015 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_net [2021-12-06 20:39:34,015 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-12-06 20:39:34,015 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-12-06 20:39:34,015 INFO L130 BoogieDeclarations]: Found specification of procedure lockdep_rcu_suspicious [2021-12-06 20:39:34,015 INFO L138 BoogieDeclarations]: Found implementation of procedure lockdep_rcu_suspicious [2021-12-06 20:39:34,015 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_percpu_size [2021-12-06 20:39:34,015 INFO L130 BoogieDeclarations]: Found specification of procedure lapbeth_get_x25_dev [2021-12-06 20:39:34,016 INFO L138 BoogieDeclarations]: Found implementation of procedure lapbeth_get_x25_dev [2021-12-06 20:39:34,016 INFO L130 BoogieDeclarations]: Found specification of procedure skb_headlen [2021-12-06 20:39:34,016 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_headlen [2021-12-06 20:39:34,016 INFO L130 BoogieDeclarations]: Found specification of procedure netif_running [2021-12-06 20:39:34,016 INFO L138 BoogieDeclarations]: Found implementation of procedure netif_running [2021-12-06 20:39:34,016 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-12-06 20:39:34,016 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_remove [2021-12-06 20:39:34,016 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_remove [2021-12-06 20:39:34,016 INFO L130 BoogieDeclarations]: Found specification of procedure lapbeth_connected [2021-12-06 20:39:34,017 INFO L138 BoogieDeclarations]: Found implementation of procedure lapbeth_connected [2021-12-06 20:39:34,017 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-12-06 20:39:34,017 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-12-06 20:39:34,017 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2021-12-06 20:39:34,017 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2021-12-06 20:39:34,017 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_successful_zalloc [2021-12-06 20:39:34,017 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_successful_zalloc [2021-12-06 20:39:34,017 INFO L130 BoogieDeclarations]: Found specification of procedure netdev_priv [2021-12-06 20:39:34,017 INFO L138 BoogieDeclarations]: Found implementation of procedure netdev_priv [2021-12-06 20:39:34,017 INFO L130 BoogieDeclarations]: Found specification of procedure netdev_get_tx_queue [2021-12-06 20:39:34,018 INFO L138 BoogieDeclarations]: Found implementation of procedure netdev_get_tx_queue [2021-12-06 20:39:34,018 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-06 20:39:34,018 INFO L130 BoogieDeclarations]: Found specification of procedure unregister_netdevice [2021-12-06 20:39:34,018 INFO L138 BoogieDeclarations]: Found implementation of procedure unregister_netdevice [2021-12-06 20:39:34,018 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2021-12-06 20:39:34,018 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-06 20:39:34,018 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-06 20:39:34,299 INFO L236 CfgBuilder]: Building ICFG [2021-12-06 20:39:34,301 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-06 20:39:34,490 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-12-06 20:39:35,243 INFO L277 CfgBuilder]: Performing block encoding [2021-12-06 20:39:35,258 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-06 20:39:35,258 INFO L301 CfgBuilder]: Removed 3 assume(true) statements. [2021-12-06 20:39:35,260 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 08:39:35 BoogieIcfgContainer [2021-12-06 20:39:35,260 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-06 20:39:35,262 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-06 20:39:35,262 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-06 20:39:35,264 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-06 20:39:35,264 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.12 08:39:32" (1/3) ... [2021-12-06 20:39:35,265 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2d52a931 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 08:39:35, skipping insertion in model container [2021-12-06 20:39:35,265 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:39:33" (2/3) ... [2021-12-06 20:39:35,265 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2d52a931 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 08:39:35, skipping insertion in model container [2021-12-06 20:39:35,265 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 08:39:35" (3/3) ... [2021-12-06 20:39:35,266 INFO L111 eAbstractionObserver]: Analyzing ICFG 205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--lapbether.ko-entry_point.cil.out.i [2021-12-06 20:39:35,271 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-06 20:39:35,271 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-06 20:39:35,312 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-06 20:39:35,317 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-06 20:39:35,318 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-06 20:39:35,350 INFO L276 IsEmpty]: Start isEmpty. Operand has 727 states, 585 states have (on average 1.488888888888889) internal successors, (871), 595 states have internal predecessors, (871), 106 states have call successors, (106), 35 states have call predecessors, (106), 34 states have return successors, (100), 100 states have call predecessors, (100), 100 states have call successors, (100) [2021-12-06 20:39:35,365 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 151 [2021-12-06 20:39:35,365 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 20:39:35,366 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:39:35,366 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 20:39:35,370 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:39:35,370 INFO L85 PathProgramCache]: Analyzing trace with hash -272515885, now seen corresponding path program 1 times [2021-12-06 20:39:35,378 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:39:35,378 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [348175002] [2021-12-06 20:39:35,379 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:39:35,379 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:39:35,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:35,654 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 20:39:35,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:35,679 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:35,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:35,691 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:35,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:35,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 20:39:35,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:35,719 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:35,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:35,735 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:35,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:35,749 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 20:39:35,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:35,775 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:35,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:35,790 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:35,792 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:35,803 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 20:39:35,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:35,819 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:35,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:35,828 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:35,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:35,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2021-12-06 20:39:35,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:35,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:35,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:35,854 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:35,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:35,860 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2021-12-06 20:39:35,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:35,872 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:35,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:35,878 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:35,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:35,884 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2021-12-06 20:39:35,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:35,894 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:35,896 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:35,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:35,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:35,905 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2021-12-06 20:39:35,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:35,915 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:35,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:35,920 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:35,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:35,927 INFO L134 CoverageAnalysis]: Checked inductivity of 392 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 392 trivial. 0 not checked. [2021-12-06 20:39:35,928 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:39:35,928 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [348175002] [2021-12-06 20:39:35,928 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [348175002] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:39:35,929 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:39:35,929 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-06 20:39:35,930 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [665014399] [2021-12-06 20:39:35,930 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:39:35,934 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-06 20:39:35,934 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:39:35,953 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-06 20:39:35,954 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-12-06 20:39:35,956 INFO L87 Difference]: Start difference. First operand has 727 states, 585 states have (on average 1.488888888888889) internal successors, (871), 595 states have internal predecessors, (871), 106 states have call successors, (106), 35 states have call predecessors, (106), 34 states have return successors, (100), 100 states have call predecessors, (100), 100 states have call successors, (100) Second operand has 4 states, 4 states have (on average 9.5) internal successors, (38), 2 states have internal predecessors, (38), 2 states have call successors, (11), 4 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2021-12-06 20:39:36,483 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:39:36,483 INFO L93 Difference]: Finished difference Result 1498 states and 2279 transitions. [2021-12-06 20:39:36,484 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-06 20:39:36,485 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.5) internal successors, (38), 2 states have internal predecessors, (38), 2 states have call successors, (11), 4 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 150 [2021-12-06 20:39:36,486 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 20:39:36,500 INFO L225 Difference]: With dead ends: 1498 [2021-12-06 20:39:36,500 INFO L226 Difference]: Without dead ends: 763 [2021-12-06 20:39:36,508 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 66 GetRequests, 64 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-12-06 20:39:36,511 INFO L933 BasicCegarLoop]: 1047 mSDtfsCounter, 264 mSDsluCounter, 1292 mSDsCounter, 0 mSdLazyCounter, 248 mSolverCounterSat, 119 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 274 SdHoareTripleChecker+Valid, 2339 SdHoareTripleChecker+Invalid, 367 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 119 IncrementalHoareTripleChecker+Valid, 248 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-06 20:39:36,511 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [274 Valid, 2339 Invalid, 367 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [119 Valid, 248 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-06 20:39:36,526 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 763 states. [2021-12-06 20:39:36,585 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 763 to 714. [2021-12-06 20:39:36,588 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 714 states, 580 states have (on average 1.467241379310345) internal successors, (851), 582 states have internal predecessors, (851), 100 states have call successors, (100), 34 states have call predecessors, (100), 33 states have return successors, (99), 99 states have call predecessors, (99), 99 states have call successors, (99) [2021-12-06 20:39:36,592 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 714 states to 714 states and 1050 transitions. [2021-12-06 20:39:36,594 INFO L78 Accepts]: Start accepts. Automaton has 714 states and 1050 transitions. Word has length 150 [2021-12-06 20:39:36,594 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 20:39:36,594 INFO L470 AbstractCegarLoop]: Abstraction has 714 states and 1050 transitions. [2021-12-06 20:39:36,594 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.5) internal successors, (38), 2 states have internal predecessors, (38), 2 states have call successors, (11), 4 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2021-12-06 20:39:36,595 INFO L276 IsEmpty]: Start isEmpty. Operand 714 states and 1050 transitions. [2021-12-06 20:39:36,598 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 151 [2021-12-06 20:39:36,598 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 20:39:36,599 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:39:36,599 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-06 20:39:36,599 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 20:39:36,599 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:39:36,599 INFO L85 PathProgramCache]: Analyzing trace with hash -1960355613, now seen corresponding path program 1 times [2021-12-06 20:39:36,599 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:39:36,600 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1166499785] [2021-12-06 20:39:36,600 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:39:36,600 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:39:36,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:36,712 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 20:39:36,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:36,723 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:36,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:36,727 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:36,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:36,732 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 20:39:36,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:36,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:36,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:36,743 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:36,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:36,747 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 20:39:36,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:36,753 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:36,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:36,758 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:36,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:36,763 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 20:39:36,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:36,769 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:36,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:36,773 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:36,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:36,777 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2021-12-06 20:39:36,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:36,784 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:36,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:36,788 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:36,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:36,793 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2021-12-06 20:39:36,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:36,800 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:36,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:36,804 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:36,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:36,809 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2021-12-06 20:39:36,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:36,815 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:36,816 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:36,819 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:36,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:36,824 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2021-12-06 20:39:36,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:36,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:36,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:36,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:36,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:36,839 INFO L134 CoverageAnalysis]: Checked inductivity of 392 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 392 trivial. 0 not checked. [2021-12-06 20:39:36,840 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:39:36,840 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1166499785] [2021-12-06 20:39:36,840 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1166499785] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:39:36,840 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:39:36,840 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 20:39:36,840 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [344154744] [2021-12-06 20:39:36,840 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:39:36,841 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 20:39:36,841 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:39:36,842 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 20:39:36,842 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-12-06 20:39:36,842 INFO L87 Difference]: Start difference. First operand 714 states and 1050 transitions. Second operand has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 4 states have internal predecessors, (38), 2 states have call successors, (11), 4 states have call predecessors, (11), 1 states have return successors, (10), 1 states have call predecessors, (10), 1 states have call successors, (10) [2021-12-06 20:39:37,718 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:39:37,719 INFO L93 Difference]: Finished difference Result 1851 states and 2800 transitions. [2021-12-06 20:39:37,719 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-06 20:39:37,719 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 4 states have internal predecessors, (38), 2 states have call successors, (11), 4 states have call predecessors, (11), 1 states have return successors, (10), 1 states have call predecessors, (10), 1 states have call successors, (10) Word has length 150 [2021-12-06 20:39:37,720 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 20:39:37,730 INFO L225 Difference]: With dead ends: 1851 [2021-12-06 20:39:37,730 INFO L226 Difference]: Without dead ends: 1157 [2021-12-06 20:39:37,732 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 58 GetRequests, 51 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=24, Invalid=48, Unknown=0, NotChecked=0, Total=72 [2021-12-06 20:39:37,734 INFO L933 BasicCegarLoop]: 1595 mSDtfsCounter, 1817 mSDsluCounter, 3148 mSDsCounter, 0 mSdLazyCounter, 721 mSolverCounterSat, 292 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1867 SdHoareTripleChecker+Valid, 4743 SdHoareTripleChecker+Invalid, 1013 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 292 IncrementalHoareTripleChecker+Valid, 721 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2021-12-06 20:39:37,734 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1867 Valid, 4743 Invalid, 1013 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [292 Valid, 721 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2021-12-06 20:39:37,737 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1157 states. [2021-12-06 20:39:37,781 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1157 to 714. [2021-12-06 20:39:37,783 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 714 states, 580 states have (on average 1.4637931034482758) internal successors, (849), 582 states have internal predecessors, (849), 100 states have call successors, (100), 34 states have call predecessors, (100), 33 states have return successors, (99), 99 states have call predecessors, (99), 99 states have call successors, (99) [2021-12-06 20:39:37,789 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 714 states to 714 states and 1048 transitions. [2021-12-06 20:39:37,790 INFO L78 Accepts]: Start accepts. Automaton has 714 states and 1048 transitions. Word has length 150 [2021-12-06 20:39:37,791 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 20:39:37,791 INFO L470 AbstractCegarLoop]: Abstraction has 714 states and 1048 transitions. [2021-12-06 20:39:37,791 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 4 states have internal predecessors, (38), 2 states have call successors, (11), 4 states have call predecessors, (11), 1 states have return successors, (10), 1 states have call predecessors, (10), 1 states have call successors, (10) [2021-12-06 20:39:37,791 INFO L276 IsEmpty]: Start isEmpty. Operand 714 states and 1048 transitions. [2021-12-06 20:39:37,795 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 151 [2021-12-06 20:39:37,795 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 20:39:37,796 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:39:37,796 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-06 20:39:37,796 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 20:39:37,796 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:39:37,796 INFO L85 PathProgramCache]: Analyzing trace with hash 147056539, now seen corresponding path program 1 times [2021-12-06 20:39:37,797 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:39:37,797 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [861181760] [2021-12-06 20:39:37,797 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:39:37,797 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:39:37,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:37,893 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 20:39:37,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:37,901 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:37,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:37,907 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:37,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:37,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 20:39:37,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:37,921 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:37,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:37,926 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:37,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:37,930 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 20:39:37,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:37,937 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:37,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:37,942 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:37,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:37,946 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 20:39:37,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:37,955 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:37,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:37,961 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:37,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:37,966 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2021-12-06 20:39:37,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:37,974 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:37,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:37,979 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:37,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:37,985 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2021-12-06 20:39:37,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:37,991 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:37,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:38,007 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:38,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:38,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2021-12-06 20:39:38,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:38,019 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:38,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:38,023 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:38,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:38,028 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2021-12-06 20:39:38,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:38,034 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:38,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:38,039 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:38,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:38,043 INFO L134 CoverageAnalysis]: Checked inductivity of 392 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 392 trivial. 0 not checked. [2021-12-06 20:39:38,043 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:39:38,044 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [861181760] [2021-12-06 20:39:38,044 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [861181760] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:39:38,044 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:39:38,044 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 20:39:38,044 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1186354880] [2021-12-06 20:39:38,044 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:39:38,045 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 20:39:38,045 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:39:38,045 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 20:39:38,045 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2021-12-06 20:39:38,046 INFO L87 Difference]: Start difference. First operand 714 states and 1048 transitions. Second operand has 5 states, 5 states have (on average 7.6) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (11), 4 states have call predecessors, (11), 1 states have return successors, (10), 1 states have call predecessors, (10), 1 states have call successors, (10) [2021-12-06 20:39:38,847 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:39:38,847 INFO L93 Difference]: Finished difference Result 2170 states and 3211 transitions. [2021-12-06 20:39:38,847 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 20:39:38,847 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.6) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (11), 4 states have call predecessors, (11), 1 states have return successors, (10), 1 states have call predecessors, (10), 1 states have call successors, (10) Word has length 150 [2021-12-06 20:39:38,848 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 20:39:38,855 INFO L225 Difference]: With dead ends: 2170 [2021-12-06 20:39:38,855 INFO L226 Difference]: Without dead ends: 1476 [2021-12-06 20:39:38,856 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 55 GetRequests, 50 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2021-12-06 20:39:38,858 INFO L933 BasicCegarLoop]: 1111 mSDtfsCounter, 1468 mSDsluCounter, 2126 mSDsCounter, 0 mSdLazyCounter, 656 mSolverCounterSat, 271 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1526 SdHoareTripleChecker+Valid, 3237 SdHoareTripleChecker+Invalid, 927 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 271 IncrementalHoareTripleChecker+Valid, 656 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2021-12-06 20:39:38,858 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1526 Valid, 3237 Invalid, 927 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [271 Valid, 656 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2021-12-06 20:39:38,860 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1476 states. [2021-12-06 20:39:38,906 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1476 to 1378. [2021-12-06 20:39:38,908 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1378 states, 1125 states have (on average 1.4746666666666666) internal successors, (1659), 1129 states have internal predecessors, (1659), 186 states have call successors, (186), 67 states have call predecessors, (186), 66 states have return successors, (185), 185 states have call predecessors, (185), 185 states have call successors, (185) [2021-12-06 20:39:38,915 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1378 states to 1378 states and 2030 transitions. [2021-12-06 20:39:38,915 INFO L78 Accepts]: Start accepts. Automaton has 1378 states and 2030 transitions. Word has length 150 [2021-12-06 20:39:38,916 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 20:39:38,916 INFO L470 AbstractCegarLoop]: Abstraction has 1378 states and 2030 transitions. [2021-12-06 20:39:38,916 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.6) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (11), 4 states have call predecessors, (11), 1 states have return successors, (10), 1 states have call predecessors, (10), 1 states have call successors, (10) [2021-12-06 20:39:38,916 INFO L276 IsEmpty]: Start isEmpty. Operand 1378 states and 2030 transitions. [2021-12-06 20:39:38,921 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 214 [2021-12-06 20:39:38,921 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 20:39:38,921 INFO L514 BasicCegarLoop]: trace histogram [11, 11, 11, 11, 11, 11, 11, 11, 11, 11, 11, 11, 11, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:39:38,921 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-06 20:39:38,921 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 20:39:38,922 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:39:38,922 INFO L85 PathProgramCache]: Analyzing trace with hash -716980191, now seen corresponding path program 1 times [2021-12-06 20:39:38,922 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:39:38,922 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [17624371] [2021-12-06 20:39:38,922 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:39:38,922 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:39:38,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:39,034 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 20:39:39,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:39,045 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:39,045 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:39,048 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:39,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:39,052 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 20:39:39,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:39,057 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:39,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:39,061 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:39,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:39,064 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 20:39:39,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:39,070 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:39,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:39,074 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:39,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:39,077 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 20:39:39,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:39,083 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:39,083 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:39,086 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:39,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:39,090 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2021-12-06 20:39:39,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:39,097 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:39,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:39,102 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:39,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:39,107 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2021-12-06 20:39:39,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:39,115 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:39,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:39,120 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:39,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:39,124 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2021-12-06 20:39:39,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:39,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:39,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:39,135 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:39,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:39,138 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2021-12-06 20:39:39,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:39,144 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:39,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:39,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:39,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:39,151 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 144 [2021-12-06 20:39:39,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:39,159 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:39,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:39,162 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:39,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:39,166 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 161 [2021-12-06 20:39:39,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:39,173 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:39,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:39,188 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:39,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:39,191 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 177 [2021-12-06 20:39:39,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:39,198 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:39,198 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:39,201 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:39,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:39,205 INFO L134 CoverageAnalysis]: Checked inductivity of 776 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 776 trivial. 0 not checked. [2021-12-06 20:39:39,205 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:39:39,206 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [17624371] [2021-12-06 20:39:39,206 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [17624371] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:39:39,206 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:39:39,206 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-06 20:39:39,206 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1431231451] [2021-12-06 20:39:39,206 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:39:39,206 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-06 20:39:39,207 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:39:39,207 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-06 20:39:39,207 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2021-12-06 20:39:39,207 INFO L87 Difference]: Start difference. First operand 1378 states and 2030 transitions. Second operand has 7 states, 7 states have (on average 7.285714285714286) internal successors, (51), 5 states have internal predecessors, (51), 3 states have call successors, (14), 4 states have call predecessors, (14), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2021-12-06 20:39:40,242 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:39:40,242 INFO L93 Difference]: Finished difference Result 4273 states and 6404 transitions. [2021-12-06 20:39:40,242 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-06 20:39:40,243 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.285714285714286) internal successors, (51), 5 states have internal predecessors, (51), 3 states have call successors, (14), 4 states have call predecessors, (14), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) Word has length 213 [2021-12-06 20:39:40,244 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 20:39:40,263 INFO L225 Difference]: With dead ends: 4273 [2021-12-06 20:39:40,263 INFO L226 Difference]: Without dead ends: 2901 [2021-12-06 20:39:40,267 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 77 GetRequests, 68 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=78, Unknown=0, NotChecked=0, Total=110 [2021-12-06 20:39:40,268 INFO L933 BasicCegarLoop]: 1313 mSDtfsCounter, 1694 mSDsluCounter, 3556 mSDsCounter, 0 mSdLazyCounter, 1249 mSolverCounterSat, 486 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1749 SdHoareTripleChecker+Valid, 4869 SdHoareTripleChecker+Invalid, 1735 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 486 IncrementalHoareTripleChecker+Valid, 1249 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2021-12-06 20:39:40,268 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1749 Valid, 4869 Invalid, 1735 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [486 Valid, 1249 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2021-12-06 20:39:40,272 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2901 states. [2021-12-06 20:39:40,350 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2901 to 2715. [2021-12-06 20:39:40,355 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2715 states, 2219 states have (on average 1.4785939612438035) internal successors, (3281), 2229 states have internal predecessors, (3281), 361 states have call successors, (361), 133 states have call predecessors, (361), 134 states have return successors, (408), 360 states have call predecessors, (408), 360 states have call successors, (408) [2021-12-06 20:39:40,364 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2715 states to 2715 states and 4050 transitions. [2021-12-06 20:39:40,365 INFO L78 Accepts]: Start accepts. Automaton has 2715 states and 4050 transitions. Word has length 213 [2021-12-06 20:39:40,365 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 20:39:40,365 INFO L470 AbstractCegarLoop]: Abstraction has 2715 states and 4050 transitions. [2021-12-06 20:39:40,366 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.285714285714286) internal successors, (51), 5 states have internal predecessors, (51), 3 states have call successors, (14), 4 states have call predecessors, (14), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2021-12-06 20:39:40,366 INFO L276 IsEmpty]: Start isEmpty. Operand 2715 states and 4050 transitions. [2021-12-06 20:39:40,374 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 247 [2021-12-06 20:39:40,374 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 20:39:40,374 INFO L514 BasicCegarLoop]: trace histogram [11, 11, 11, 11, 11, 11, 11, 11, 11, 11, 11, 11, 11, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:39:40,374 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-06 20:39:40,375 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 20:39:40,375 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:39:40,375 INFO L85 PathProgramCache]: Analyzing trace with hash 1676192007, now seen corresponding path program 1 times [2021-12-06 20:39:40,375 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:39:40,375 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [350557394] [2021-12-06 20:39:40,375 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:39:40,375 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:39:40,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,456 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 20:39:40,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,463 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:40,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,467 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:40,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,470 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 20:39:40,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,475 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:40,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,479 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:40,480 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,482 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 20:39:40,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,498 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:40,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,502 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:40,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,505 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 20:39:40,507 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,511 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:40,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,515 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:40,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,519 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2021-12-06 20:39:40,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,524 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:40,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,528 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:40,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,532 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2021-12-06 20:39:40,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,537 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:40,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,541 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:40,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,544 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2021-12-06 20:39:40,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,550 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:40,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,554 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:40,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,558 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2021-12-06 20:39:40,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,563 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:40,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,567 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:40,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,571 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 144 [2021-12-06 20:39:40,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,576 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:40,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,580 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:40,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,584 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 161 [2021-12-06 20:39:40,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:40,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,594 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:40,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,597 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 177 [2021-12-06 20:39:40,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,603 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:40,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,607 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:40,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 204 [2021-12-06 20:39:40,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,620 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 212 [2021-12-06 20:39:40,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:40,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:40,637 INFO L134 CoverageAnalysis]: Checked inductivity of 784 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 774 trivial. 0 not checked. [2021-12-06 20:39:40,637 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:39:40,637 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [350557394] [2021-12-06 20:39:40,637 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [350557394] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:39:40,637 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:39:40,637 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 20:39:40,637 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1231363836] [2021-12-06 20:39:40,637 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:39:40,638 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 20:39:40,638 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:39:40,638 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 20:39:40,638 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-12-06 20:39:40,638 INFO L87 Difference]: Start difference. First operand 2715 states and 4050 transitions. Second operand has 6 states, 6 states have (on average 13.333333333333334) internal successors, (80), 3 states have internal predecessors, (80), 2 states have call successors, (17), 5 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 1 states have call successors, (16) [2021-12-06 20:39:41,219 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:39:41,219 INFO L93 Difference]: Finished difference Result 4265 states and 6462 transitions. [2021-12-06 20:39:41,219 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-06 20:39:41,219 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 13.333333333333334) internal successors, (80), 3 states have internal predecessors, (80), 2 states have call successors, (17), 5 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 1 states have call successors, (16) Word has length 246 [2021-12-06 20:39:41,220 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 20:39:41,237 INFO L225 Difference]: With dead ends: 4265 [2021-12-06 20:39:41,237 INFO L226 Difference]: Without dead ends: 2903 [2021-12-06 20:39:41,242 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 79 GetRequests, 73 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=23, Invalid=33, Unknown=0, NotChecked=0, Total=56 [2021-12-06 20:39:41,242 INFO L933 BasicCegarLoop]: 1021 mSDtfsCounter, 767 mSDsluCounter, 1481 mSDsCounter, 0 mSdLazyCounter, 389 mSolverCounterSat, 347 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 771 SdHoareTripleChecker+Valid, 2502 SdHoareTripleChecker+Invalid, 736 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 347 IncrementalHoareTripleChecker+Valid, 389 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-12-06 20:39:41,243 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [771 Valid, 2502 Invalid, 736 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [347 Valid, 389 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-12-06 20:39:41,246 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2903 states. [2021-12-06 20:39:41,336 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2903 to 2733. [2021-12-06 20:39:41,340 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2733 states, 2231 states have (on average 1.476019722097714) internal successors, (3293), 2243 states have internal predecessors, (3293), 361 states have call successors, (361), 133 states have call predecessors, (361), 140 states have return successors, (428), 364 states have call predecessors, (428), 360 states have call successors, (428) [2021-12-06 20:39:41,349 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2733 states to 2733 states and 4082 transitions. [2021-12-06 20:39:41,350 INFO L78 Accepts]: Start accepts. Automaton has 2733 states and 4082 transitions. Word has length 246 [2021-12-06 20:39:41,350 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 20:39:41,350 INFO L470 AbstractCegarLoop]: Abstraction has 2733 states and 4082 transitions. [2021-12-06 20:39:41,350 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 13.333333333333334) internal successors, (80), 3 states have internal predecessors, (80), 2 states have call successors, (17), 5 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 1 states have call successors, (16) [2021-12-06 20:39:41,350 INFO L276 IsEmpty]: Start isEmpty. Operand 2733 states and 4082 transitions. [2021-12-06 20:39:41,358 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 262 [2021-12-06 20:39:41,359 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 20:39:41,359 INFO L514 BasicCegarLoop]: trace histogram [12, 12, 12, 12, 12, 12, 12, 12, 12, 12, 12, 12, 12, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:39:41,359 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-06 20:39:41,359 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 20:39:41,359 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:39:41,360 INFO L85 PathProgramCache]: Analyzing trace with hash 2076105357, now seen corresponding path program 1 times [2021-12-06 20:39:41,360 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:39:41,360 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [202502225] [2021-12-06 20:39:41,360 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:39:41,360 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:39:41,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,442 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 20:39:41,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,449 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:41,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,452 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:41,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,456 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 20:39:41,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,460 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:41,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,464 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:41,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,467 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 20:39:41,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,472 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:41,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,475 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:41,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,478 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 20:39:41,480 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,483 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:41,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,487 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:41,487 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,490 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2021-12-06 20:39:41,491 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,495 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:41,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,499 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:41,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,502 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2021-12-06 20:39:41,503 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,507 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:41,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,511 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:41,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,514 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2021-12-06 20:39:41,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,519 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:41,519 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,522 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:41,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2021-12-06 20:39:41,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,530 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:41,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,534 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:41,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,537 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 144 [2021-12-06 20:39:41,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,542 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:41,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,545 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:41,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,549 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 161 [2021-12-06 20:39:41,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,555 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:41,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,559 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:41,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,562 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 177 [2021-12-06 20:39:41,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,568 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:41,569 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,572 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:41,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,583 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 206 [2021-12-06 20:39:41,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,593 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:41,595 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,600 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:41,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,609 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:41,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,614 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 20:39:41,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,618 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 20:39:41,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:39:41,624 INFO L134 CoverageAnalysis]: Checked inductivity of 934 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 924 trivial. 0 not checked. [2021-12-06 20:39:41,624 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:39:41,624 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [202502225] [2021-12-06 20:39:41,624 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [202502225] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:39:41,624 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:39:41,625 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 20:39:41,625 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [702355382] [2021-12-06 20:39:41,625 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:39:41,625 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 20:39:41,625 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:39:41,626 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 20:39:41,626 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2021-12-06 20:39:41,626 INFO L87 Difference]: Start difference. First operand 2733 states and 4082 transitions. Second operand has 6 states, 6 states have (on average 13.833333333333334) internal successors, (83), 3 states have internal predecessors, (83), 3 states have call successors, (18), 5 states have call predecessors, (18), 1 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) [2021-12-06 20:39:42,799 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:39:42,799 INFO L93 Difference]: Finished difference Result 8395 states and 12588 transitions. [2021-12-06 20:39:42,800 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-06 20:39:42,800 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 13.833333333333334) internal successors, (83), 3 states have internal predecessors, (83), 3 states have call successors, (18), 5 states have call predecessors, (18), 1 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) Word has length 261 [2021-12-06 20:39:42,800 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 20:39:42,825 INFO L225 Difference]: With dead ends: 8395 [2021-12-06 20:39:42,825 INFO L226 Difference]: Without dead ends: 5682 [2021-12-06 20:39:42,832 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 86 GetRequests, 79 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=30, Invalid=42, Unknown=0, NotChecked=0, Total=72 [2021-12-06 20:39:42,832 INFO L933 BasicCegarLoop]: 1734 mSDtfsCounter, 1396 mSDsluCounter, 4171 mSDsCounter, 0 mSdLazyCounter, 1127 mSolverCounterSat, 234 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1466 SdHoareTripleChecker+Valid, 5905 SdHoareTripleChecker+Invalid, 1361 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 234 IncrementalHoareTripleChecker+Valid, 1127 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2021-12-06 20:39:42,832 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1466 Valid, 5905 Invalid, 1361 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [234 Valid, 1127 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2021-12-06 20:39:42,838 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5682 states. [2021-12-06 20:39:42,973 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5682 to 5330. [2021-12-06 20:39:42,982 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5330 states, 4384 states have (on average 1.4726277372262773) internal successors, (6456), 4410 states have internal predecessors, (6456), 665 states have call successors, (665), 265 states have call predecessors, (665), 280 states have return successors, (778), 670 states have call predecessors, (778), 664 states have call successors, (778) [2021-12-06 20:39:42,993 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5330 states to 5330 states and 7899 transitions. [2021-12-06 20:39:42,994 INFO L78 Accepts]: Start accepts. Automaton has 5330 states and 7899 transitions. Word has length 261 [2021-12-06 20:39:42,994 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 20:39:42,994 INFO L470 AbstractCegarLoop]: Abstraction has 5330 states and 7899 transitions. [2021-12-06 20:39:42,994 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 13.833333333333334) internal successors, (83), 3 states have internal predecessors, (83), 3 states have call successors, (18), 5 states have call predecessors, (18), 1 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) [2021-12-06 20:39:42,994 INFO L276 IsEmpty]: Start isEmpty. Operand 5330 states and 7899 transitions. [2021-12-06 20:39:43,007 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 262 [2021-12-06 20:39:43,007 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 20:39:43,007 INFO L514 BasicCegarLoop]: trace histogram [12, 12, 12, 12, 12, 12, 12, 12, 12, 12, 12, 12, 12, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:39:43,007 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-06 20:39:43,008 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 20:39:43,008 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:39:43,008 INFO L85 PathProgramCache]: Analyzing trace with hash 1757628959, now seen corresponding path program 1 times [2021-12-06 20:39:43,008 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:39:43,008 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1760538343] [2021-12-06 20:39:43,008 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:39:43,008 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:39:43,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 20:39:43,125 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 20:39:43,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 20:39:43,379 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 20:39:43,380 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-12-06 20:39:43,380 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-06 20:39:43,382 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-06 20:39:43,384 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:39:43,387 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-06 20:39:43,553 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.12 08:39:43 BoogieIcfgContainer [2021-12-06 20:39:43,553 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-06 20:39:43,554 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-06 20:39:43,554 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-06 20:39:43,554 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-06 20:39:43,554 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 08:39:35" (3/4) ... [2021-12-06 20:39:43,556 INFO L131 WitnessPrinter]: Generating witness for reachability counterexample [2021-12-06 20:39:43,727 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d8ab52a-71b1-48e9-a6f6-c4f641158af5/bin/uautomizer-DrprNOufMa/witness.graphml [2021-12-06 20:39:43,727 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-06 20:39:43,727 INFO L158 Benchmark]: Toolchain (without parser) took 11321.87ms. Allocated memory was 98.6MB in the beginning and 348.1MB in the end (delta: 249.6MB). Free memory was 55.1MB in the beginning and 102.3MB in the end (delta: -47.2MB). Peak memory consumption was 201.8MB. Max. memory is 16.1GB. [2021-12-06 20:39:43,727 INFO L158 Benchmark]: CDTParser took 0.12ms. Allocated memory is still 98.6MB. Free memory is still 54.1MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 20:39:43,728 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1302.37ms. Allocated memory was 98.6MB in the beginning and 132.1MB in the end (delta: 33.6MB). Free memory was 54.9MB in the beginning and 51.8MB in the end (delta: 3.1MB). Peak memory consumption was 44.5MB. Max. memory is 16.1GB. [2021-12-06 20:39:43,728 INFO L158 Benchmark]: Boogie Procedure Inliner took 114.03ms. Allocated memory is still 132.1MB. Free memory was 51.8MB in the beginning and 72.9MB in the end (delta: -21.1MB). Peak memory consumption was 8.2MB. Max. memory is 16.1GB. [2021-12-06 20:39:43,728 INFO L158 Benchmark]: Boogie Preprocessor took 109.28ms. Allocated memory is still 132.1MB. Free memory was 72.9MB in the beginning and 61.6MB in the end (delta: 11.3MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-12-06 20:39:43,728 INFO L158 Benchmark]: RCFGBuilder took 1322.24ms. Allocated memory was 132.1MB in the beginning and 159.4MB in the end (delta: 27.3MB). Free memory was 61.6MB in the beginning and 81.1MB in the end (delta: -19.5MB). Peak memory consumption was 38.0MB. Max. memory is 16.1GB. [2021-12-06 20:39:43,728 INFO L158 Benchmark]: TraceAbstraction took 8291.95ms. Allocated memory was 159.4MB in the beginning and 348.1MB in the end (delta: 188.7MB). Free memory was 80.6MB in the beginning and 167.3MB in the end (delta: -86.6MB). Peak memory consumption was 153.5MB. Max. memory is 16.1GB. [2021-12-06 20:39:43,729 INFO L158 Benchmark]: Witness Printer took 172.92ms. Allocated memory is still 348.1MB. Free memory was 167.3MB in the beginning and 102.3MB in the end (delta: 65.0MB). Peak memory consumption was 65.0MB. Max. memory is 16.1GB. [2021-12-06 20:39:43,730 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.12ms. Allocated memory is still 98.6MB. Free memory is still 54.1MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1302.37ms. Allocated memory was 98.6MB in the beginning and 132.1MB in the end (delta: 33.6MB). Free memory was 54.9MB in the beginning and 51.8MB in the end (delta: 3.1MB). Peak memory consumption was 44.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 114.03ms. Allocated memory is still 132.1MB. Free memory was 51.8MB in the beginning and 72.9MB in the end (delta: -21.1MB). Peak memory consumption was 8.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 109.28ms. Allocated memory is still 132.1MB. Free memory was 72.9MB in the beginning and 61.6MB in the end (delta: 11.3MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * RCFGBuilder took 1322.24ms. Allocated memory was 132.1MB in the beginning and 159.4MB in the end (delta: 27.3MB). Free memory was 61.6MB in the beginning and 81.1MB in the end (delta: -19.5MB). Peak memory consumption was 38.0MB. Max. memory is 16.1GB. * TraceAbstraction took 8291.95ms. Allocated memory was 159.4MB in the beginning and 348.1MB in the end (delta: 188.7MB). Free memory was 80.6MB in the beginning and 167.3MB in the end (delta: -86.6MB). Peak memory consumption was 153.5MB. Max. memory is 16.1GB. * Witness Printer took 172.92ms. Allocated memory is still 348.1MB. Free memory was 167.3MB in the beginning and 102.3MB in the end (delta: 65.0MB). Peak memory consumption was 65.0MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - CounterExampleResult [Line: 6079]: a call to reach_error is reachable a call to reach_error is reachable We found a FailurePath: [L6102] int ldv_state_variable_3 ; [L6103] int LDV_IN_INTERRUPT = 1; [L6104] int ldv_state_variable_2 ; [L6105] struct net_device *lapbeth_netdev_ops_group1 ; [L6106] int ref_cnt ; [L6107] struct sk_buff *lapbeth_callbacks_group0 ; [L6108] struct net_device *lapbeth_callbacks_group1 ; [L6109] int ldv_state_variable_1 ; [L6110] int ldv_state_variable_4 ; [L6111] int ldv_state_variable_0 ; [L6683-L6684] static u8 const bcast_addr[6U] = { 255U, 255U, 255U, 255U, 255U, 255U}; [L6685] static struct list_head lapbeth_devices = {& lapbeth_devices, & lapbeth_devices}; [L6968-L6969] static struct lapb_register_struct const lapbeth_callbacks = {& lapbeth_connected, & lapbeth_connected, & lapbeth_disconnected, & lapbeth_disconnected, & lapbeth_data_indication, & lapbeth_data_transmit}; [L6997-L7000] static struct net_device_ops const lapbeth_netdev_ops = {0, 0, & lapbeth_open, & lapbeth_close, & lapbeth_xmit, 0, 0, 0, & lapbeth_set_mac_address, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L7117] static struct packet_type lapbeth_packet_type = {96U, 0, & lapbeth_rcv, 0, 0, {0, 0}}; [L7118] static struct notifier_block lapbeth_dev_notifier = {& lapbeth_device_event, 0, 0}; [L7119-L7128] static char const banner[37U] = { '\016', 'L', 'A', 'P', 'B', ' ', 'E', 't', 'h', 'e', 'r', 'n', 'e', 't', ' ', 'd', 'r', 'i', 'v', 'e', 'r', ' ', 'v', 'e', 'r', 's', 'i', 'o', 'n', ' ', '0', '.', '0', '2', '\n', '\000'}; [L7169] int ldv_retval_2 ; [L7170] int ldv_retval_0 ; [L7172] int ldv_retval_1 ; [L7607] Element set_impl[15] ; [L7608] int last_index = 0; [L7742] Set LDV_SKBS ; VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L7198] int ldvarg1 ; [L7199] int tmp ; [L7200] int ldvarg3 ; [L7201] int tmp___0 ; [L7202] int ldvarg0 ; [L7203] int tmp___1 ; [L7204] int ldvarg2 ; [L7205] int tmp___2 ; [L7206] struct notifier_block *ldvarg4 ; [L7207] void *tmp___3 ; [L7208] void *ldvarg5 ; [L7209] void *tmp___4 ; [L7210] unsigned long ldvarg6 ; [L7211] unsigned long tmp___5 ; [L7212] struct sk_buff *ldvarg8 ; [L7213] void *tmp___6 ; [L7214] void *ldvarg7 ; [L7215] void *tmp___7 ; [L7216] struct packet_type *ldvarg11 ; [L7217] void *tmp___8 ; [L7218] struct sk_buff *ldvarg10 ; [L7219] void *tmp___9 ; [L7220] struct net_device *ldvarg12 ; [L7221] void *tmp___10 ; [L7222] struct net_device *ldvarg9 ; [L7223] void *tmp___11 ; [L7224] int tmp___12 ; [L7225] int tmp___13 ; [L7226] int tmp___14 ; [L7227] int tmp___15 ; [L7228] int tmp___16 ; [L7229] int tmp___17 ; [L7231] tmp = __VERIFIER_nondet_int() [L7232] ldvarg1 = tmp [L7233] tmp___0 = __VERIFIER_nondet_int() [L7234] ldvarg3 = tmp___0 [L7235] tmp___1 = __VERIFIER_nondet_int() [L7236] ldvarg0 = tmp___1 [L7237] tmp___2 = __VERIFIER_nondet_int() [L7238] ldvarg2 = tmp___2 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=-4, ldvarg1=-2, ldvarg2=0, ldvarg3=-3, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=-3, tmp___1=-4, tmp___2=0] [L7239] CALL, EXPR ldv_successful_zalloc(24UL) VAL [\old(__size)=24, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=24, __size=24, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-5:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=24, __size=24, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-5:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-5:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=24, __size=24, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-5:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-5:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=24, \result={-5:0}, __size=24, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-5:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-5:0}, ref_cnt=0, set_impl={29:0}] [L7239] RET, EXPR ldv_successful_zalloc(24UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_successful_zalloc(24UL)={-5:0}, ldvarg0=-4, ldvarg1=-2, ldvarg2=0, ldvarg3=-3, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=-3, tmp___1=-4, tmp___2=0] [L7239] tmp___3 = ldv_successful_zalloc(24UL) [L7240] ldvarg4 = (struct notifier_block *)tmp___3 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=-4, ldvarg1=-2, ldvarg2=0, ldvarg3=-3, ldvarg4={-5:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=-3, tmp___1=-4, tmp___2=0, tmp___3={-5:0}] [L7241] CALL, EXPR ldv_successful_zalloc(1UL) VAL [\old(__size)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=1, __size=1, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-6:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=1, __size=1, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-6:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-6:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=1, __size=1, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-6:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-6:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=1, \result={-6:0}, __size=1, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-6:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-6:0}, ref_cnt=0, set_impl={29:0}] [L7241] RET, EXPR ldv_successful_zalloc(1UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_successful_zalloc(1UL)={-6:0}, ldvarg0=-4, ldvarg1=-2, ldvarg2=0, ldvarg3=-3, ldvarg4={-5:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=-3, tmp___1=-4, tmp___2=0, tmp___3={-5:0}] [L7241] tmp___4 = ldv_successful_zalloc(1UL) [L7242] ldvarg5 = tmp___4 [L7243] tmp___5 = __VERIFIER_nondet_ulong() [L7244] ldvarg6 = tmp___5 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=-4, ldvarg1=-2, ldvarg2=0, ldvarg3=-3, ldvarg4={-5:0}, ldvarg5={-6:0}, ldvarg6=3, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=-3, tmp___1=-4, tmp___2=0, tmp___3={-5:0}, tmp___4={-6:0}, tmp___5=3] [L7245] CALL, EXPR ldv_successful_zalloc(232UL) VAL [\old(__size)=232, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-7:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-7:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-7:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-7:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-7:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=232, \result={-7:0}, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-7:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-7:0}, ref_cnt=0, set_impl={29:0}] [L7245] RET, EXPR ldv_successful_zalloc(232UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_successful_zalloc(232UL)={-7:0}, ldvarg0=-4, ldvarg1=-2, ldvarg2=0, ldvarg3=-3, ldvarg4={-5:0}, ldvarg5={-6:0}, ldvarg6=3, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=-3, tmp___1=-4, tmp___2=0, tmp___3={-5:0}, tmp___4={-6:0}, tmp___5=3] [L7245] tmp___6 = ldv_successful_zalloc(232UL) [L7246] ldvarg8 = (struct sk_buff *)tmp___6 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=-4, ldvarg1=-2, ldvarg2=0, ldvarg3=-3, ldvarg4={-5:0}, ldvarg5={-6:0}, ldvarg6=3, ldvarg8={-7:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=-3, tmp___1=-4, tmp___2=0, tmp___3={-5:0}, tmp___4={-6:0}, tmp___5=3, tmp___6={-7:0}] [L7247] CALL, EXPR ldv_successful_zalloc(1UL) VAL [\old(__size)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=1, __size=1, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-8:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=1, __size=1, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-8:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-8:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=1, __size=1, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-8:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-8:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=1, \result={-8:0}, __size=1, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-8:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-8:0}, ref_cnt=0, set_impl={29:0}] [L7247] RET, EXPR ldv_successful_zalloc(1UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_successful_zalloc(1UL)={-8:0}, ldvarg0=-4, ldvarg1=-2, ldvarg2=0, ldvarg3=-3, ldvarg4={-5:0}, ldvarg5={-6:0}, ldvarg6=3, ldvarg8={-7:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=-3, tmp___1=-4, tmp___2=0, tmp___3={-5:0}, tmp___4={-6:0}, tmp___5=3, tmp___6={-7:0}] [L7247] tmp___7 = ldv_successful_zalloc(1UL) [L7248] ldvarg7 = tmp___7 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=-4, ldvarg1=-2, ldvarg2=0, ldvarg3=-3, ldvarg4={-5:0}, ldvarg5={-6:0}, ldvarg6=3, ldvarg7={-8:0}, ldvarg8={-7:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=-3, tmp___1=-4, tmp___2=0, tmp___3={-5:0}, tmp___4={-6:0}, tmp___5=3, tmp___6={-7:0}, tmp___7={-8:0}] [L7249] CALL, EXPR ldv_successful_zalloc(56UL) VAL [\old(__size)=56, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=56, __size=56, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-9:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=56, __size=56, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-9:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-9:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=56, __size=56, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-9:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-9:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=56, \result={-9:0}, __size=56, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-9:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-9:0}, ref_cnt=0, set_impl={29:0}] [L7249] RET, EXPR ldv_successful_zalloc(56UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_successful_zalloc(56UL)={-9:0}, ldvarg0=-4, ldvarg1=-2, ldvarg2=0, ldvarg3=-3, ldvarg4={-5:0}, ldvarg5={-6:0}, ldvarg6=3, ldvarg7={-8:0}, ldvarg8={-7:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=-3, tmp___1=-4, tmp___2=0, tmp___3={-5:0}, tmp___4={-6:0}, tmp___5=3, tmp___6={-7:0}, tmp___7={-8:0}] [L7249] tmp___8 = ldv_successful_zalloc(56UL) [L7250] ldvarg11 = (struct packet_type *)tmp___8 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=-4, ldvarg1=-2, ldvarg11={-9:0}, ldvarg2=0, ldvarg3=-3, ldvarg4={-5:0}, ldvarg5={-6:0}, ldvarg6=3, ldvarg7={-8:0}, ldvarg8={-7:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=-3, tmp___1=-4, tmp___2=0, tmp___3={-5:0}, tmp___4={-6:0}, tmp___5=3, tmp___6={-7:0}, tmp___7={-8:0}, tmp___8={-9:0}] [L7251] CALL, EXPR ldv_successful_zalloc(232UL) VAL [\old(__size)=232, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-10:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-10:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-10:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-10:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-10:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=232, \result={-10:0}, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-10:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-10:0}, ref_cnt=0, set_impl={29:0}] [L7251] RET, EXPR ldv_successful_zalloc(232UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_successful_zalloc(232UL)={-10:0}, ldvarg0=-4, ldvarg1=-2, ldvarg11={-9:0}, ldvarg2=0, ldvarg3=-3, ldvarg4={-5:0}, ldvarg5={-6:0}, ldvarg6=3, ldvarg7={-8:0}, ldvarg8={-7:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=-3, tmp___1=-4, tmp___2=0, tmp___3={-5:0}, tmp___4={-6:0}, tmp___5=3, tmp___6={-7:0}, tmp___7={-8:0}, tmp___8={-9:0}] [L7251] tmp___9 = ldv_successful_zalloc(232UL) [L7252] ldvarg10 = (struct sk_buff *)tmp___9 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=-4, ldvarg1=-2, ldvarg10={-10:0}, ldvarg11={-9:0}, ldvarg2=0, ldvarg3=-3, ldvarg4={-5:0}, ldvarg5={-6:0}, ldvarg6=3, ldvarg7={-8:0}, ldvarg8={-7:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=-3, tmp___1=-4, tmp___2=0, tmp___3={-5:0}, tmp___4={-6:0}, tmp___5=3, tmp___6={-7:0}, tmp___7={-8:0}, tmp___8={-9:0}, tmp___9={-10:0}] [L7253] CALL, EXPR ldv_successful_zalloc(3264UL) VAL [\old(__size)=3264, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-11:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-11:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-11:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-11:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-11:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=3264, \result={-11:0}, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-11:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-11:0}, ref_cnt=0, set_impl={29:0}] [L7253] RET, EXPR ldv_successful_zalloc(3264UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_successful_zalloc(3264UL)={-11:0}, ldvarg0=-4, ldvarg1=-2, ldvarg10={-10:0}, ldvarg11={-9:0}, ldvarg2=0, ldvarg3=-3, ldvarg4={-5:0}, ldvarg5={-6:0}, ldvarg6=3, ldvarg7={-8:0}, ldvarg8={-7:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=-3, tmp___1=-4, tmp___2=0, tmp___3={-5:0}, tmp___4={-6:0}, tmp___5=3, tmp___6={-7:0}, tmp___7={-8:0}, tmp___8={-9:0}, tmp___9={-10:0}] [L7253] tmp___10 = ldv_successful_zalloc(3264UL) [L7254] ldvarg12 = (struct net_device *)tmp___10 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=-4, ldvarg1=-2, ldvarg10={-10:0}, ldvarg11={-9:0}, ldvarg12={-11:0}, ldvarg2=0, ldvarg3=-3, ldvarg4={-5:0}, ldvarg5={-6:0}, ldvarg6=3, ldvarg7={-8:0}, ldvarg8={-7:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=-3, tmp___1=-4, tmp___10={-11:0}, tmp___2=0, tmp___3={-5:0}, tmp___4={-6:0}, tmp___5=3, tmp___6={-7:0}, tmp___7={-8:0}, tmp___8={-9:0}, tmp___9={-10:0}] [L7255] CALL, EXPR ldv_successful_zalloc(3264UL) VAL [\old(__size)=3264, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-12:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-12:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-12:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-12:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-12:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=3264, \result={-12:0}, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-12:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-12:0}, ref_cnt=0, set_impl={29:0}] [L7255] RET, EXPR ldv_successful_zalloc(3264UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_successful_zalloc(3264UL)={-12:0}, ldvarg0=-4, ldvarg1=-2, ldvarg10={-10:0}, ldvarg11={-9:0}, ldvarg12={-11:0}, ldvarg2=0, ldvarg3=-3, ldvarg4={-5:0}, ldvarg5={-6:0}, ldvarg6=3, ldvarg7={-8:0}, ldvarg8={-7:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=-3, tmp___1=-4, tmp___10={-11:0}, tmp___2=0, tmp___3={-5:0}, tmp___4={-6:0}, tmp___5=3, tmp___6={-7:0}, tmp___7={-8:0}, tmp___8={-9:0}, tmp___9={-10:0}] [L7255] tmp___11 = ldv_successful_zalloc(3264UL) [L7256] ldvarg9 = (struct net_device *)tmp___11 [L7257] CALL ldv_initialize() [L7761] CALL ldv_set_init(LDV_SKBS) [L7613] set = set_impl [L7614] last_index = 0 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set={29:0}, set={0:0}, set_impl={29:0}] [L7761] RET ldv_set_init(LDV_SKBS) [L7257] RET ldv_initialize() [L7258] ldv_state_variable_4 = 0 [L7259] ldv_state_variable_1 = 0 [L7260] ref_cnt = 0 [L7261] ldv_state_variable_0 = 1 [L7262] ldv_state_variable_3 = 0 [L7263] ldv_state_variable_2 = 0 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=-4, ldvarg1=-2, ldvarg10={-10:0}, ldvarg11={-9:0}, ldvarg12={-11:0}, ldvarg2=0, ldvarg3=-3, ldvarg4={-5:0}, ldvarg5={-6:0}, ldvarg6=3, ldvarg7={-8:0}, ldvarg8={-7:0}, ldvarg9={-12:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=-3, tmp___1=-4, tmp___10={-11:0}, tmp___11={-12:0}, tmp___2=0, tmp___3={-5:0}, tmp___4={-6:0}, tmp___5=3, tmp___6={-7:0}, tmp___7={-8:0}, tmp___8={-9:0}, tmp___9={-10:0}] [L7265] tmp___12 = __VERIFIER_nondet_int() [L7267] case 0: [L7354] case 1: [L7372] case 2: VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=-4, ldvarg1=-2, ldvarg10={-10:0}, ldvarg11={-9:0}, ldvarg12={-11:0}, ldvarg2=0, ldvarg3=-3, ldvarg4={-5:0}, ldvarg5={-6:0}, ldvarg6=3, ldvarg7={-8:0}, ldvarg8={-7:0}, ldvarg9={-12:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=-3, tmp___1=-4, tmp___10={-11:0}, tmp___11={-12:0}, tmp___12=2, tmp___2=0, tmp___3={-5:0}, tmp___4={-6:0}, tmp___5=3, tmp___6={-7:0}, tmp___7={-8:0}, tmp___8={-9:0}, tmp___9={-10:0}] [L7373] COND TRUE ldv_state_variable_0 != 0 [L7374] tmp___15 = __VERIFIER_nondet_int() [L7376] case 0: [L7384] case 1: VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=-4, ldvarg1=-2, ldvarg10={-10:0}, ldvarg11={-9:0}, ldvarg12={-11:0}, ldvarg2=0, ldvarg3=-3, ldvarg4={-5:0}, ldvarg5={-6:0}, ldvarg6=3, ldvarg7={-8:0}, ldvarg8={-7:0}, ldvarg9={-12:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=-3, tmp___1=-4, tmp___10={-11:0}, tmp___11={-12:0}, tmp___12=2, tmp___15=1, tmp___2=0, tmp___3={-5:0}, tmp___4={-6:0}, tmp___5=3, tmp___6={-7:0}, tmp___7={-8:0}, tmp___8={-9:0}, tmp___9={-10:0}] [L7385] COND TRUE ldv_state_variable_0 == 1 [L7386] CALL, EXPR lapbeth_init_driver() [L7132] FCALL dev_add_pack(& lapbeth_packet_type) [L7133] CALL register_netdevice_notifier(& lapbeth_dev_notifier) [L7932] return __VERIFIER_nondet_int(); [L7133] RET register_netdevice_notifier(& lapbeth_dev_notifier) [L7135] return (0); VAL [\result=0, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L7386] RET, EXPR lapbeth_init_driver() [L7386] ldv_retval_0 = lapbeth_init_driver() [L7387] COND TRUE ldv_retval_0 == 0 [L7388] ldv_state_variable_0 = 3 [L7389] ldv_state_variable_2 = 1 [L7390] ldv_state_variable_3 = 1 [L7391] CALL ldv_net_device_ops_3() [L7177] void *tmp ; VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L7179] CALL, EXPR ldv_successful_zalloc(3264UL) VAL [\old(__size)=3264, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-13:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-13:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, p={-13:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-13:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, p={-13:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=3264, \result={-13:0}, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-13:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, p={-13:0}, ref_cnt=0, set_impl={29:0}] [L7179] RET, EXPR ldv_successful_zalloc(3264UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_successful_zalloc(3264UL)={-13:0}, ref_cnt=0, set_impl={29:0}] [L7179] tmp = ldv_successful_zalloc(3264UL) [L7180] lapbeth_netdev_ops_group1 = (struct net_device *)tmp VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}, tmp={-13:0}] [L7391] RET ldv_net_device_ops_3() [L7392] ldv_state_variable_1 = 1 [L7393] ldv_state_variable_4 = 1 [L7394] CALL ldv_initialize_lapb_register_struct_4() [L7186] void *tmp ; [L7187] void *tmp___0 ; VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L7189] CALL, EXPR ldv_successful_zalloc(3264UL) VAL [\old(__size)=3264, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-14:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-14:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, p={-14:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-14:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, p={-14:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=3264, \result={-14:0}, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-14:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, p={-14:0}, ref_cnt=0, set_impl={29:0}] [L7189] RET, EXPR ldv_successful_zalloc(3264UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_successful_zalloc(3264UL)={-14:0}, ref_cnt=0, set_impl={29:0}] [L7189] tmp = ldv_successful_zalloc(3264UL) [L7190] lapbeth_callbacks_group1 = (struct net_device *)tmp VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}, tmp={-14:0}] [L7191] CALL, EXPR ldv_successful_zalloc(232UL) VAL [\old(__size)=232, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-15:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-15:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, p={-15:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-15:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, p={-15:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=232, \result={-15:0}, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-15:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, p={-15:0}, ref_cnt=0, set_impl={29:0}] [L7191] RET, EXPR ldv_successful_zalloc(232UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_successful_zalloc(232UL)={-15:0}, ref_cnt=0, set_impl={29:0}, tmp={-14:0}] [L7191] tmp___0 = ldv_successful_zalloc(232UL) [L7192] lapbeth_callbacks_group0 = (struct sk_buff *)tmp___0 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}, tmp={-14:0}, tmp___0={-15:0}] [L7394] RET ldv_initialize_lapb_register_struct_4() [L7397] COND FALSE !(ldv_retval_0 != 0) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=-4, ldvarg1=-2, ldvarg10={-10:0}, ldvarg11={-9:0}, ldvarg12={-11:0}, ldvarg2=0, ldvarg3=-3, ldvarg4={-5:0}, ldvarg5={-6:0}, ldvarg6=3, ldvarg7={-8:0}, ldvarg8={-7:0}, ldvarg9={-12:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=-3, tmp___1=-4, tmp___10={-11:0}, tmp___11={-12:0}, tmp___12=2, tmp___15=1, tmp___2=0, tmp___3={-5:0}, tmp___4={-6:0}, tmp___5=3, tmp___6={-7:0}, tmp___7={-8:0}, tmp___8={-9:0}, tmp___9={-10:0}] [L7265] tmp___12 = __VERIFIER_nondet_int() [L7267] case 0: VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=-4, ldvarg1=-2, ldvarg10={-10:0}, ldvarg11={-9:0}, ldvarg12={-11:0}, ldvarg2=0, ldvarg3=-3, ldvarg4={-5:0}, ldvarg5={-6:0}, ldvarg6=3, ldvarg7={-8:0}, ldvarg8={-7:0}, ldvarg9={-12:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=-3, tmp___1=-4, tmp___10={-11:0}, tmp___11={-12:0}, tmp___12=0, tmp___15=1, tmp___2=0, tmp___3={-5:0}, tmp___4={-6:0}, tmp___5=3, tmp___6={-7:0}, tmp___7={-8:0}, tmp___8={-9:0}, tmp___9={-10:0}] [L7268] COND TRUE ldv_state_variable_4 != 0 [L7269] tmp___13 = __VERIFIER_nondet_int() [L7271] case 0: [L7283] case 1: [L7295] case 2: [L7303] case 3: [L7315] case 4: [L7327] case 5: VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=-4, ldvarg1=-2, ldvarg10={-10:0}, ldvarg11={-9:0}, ldvarg12={-11:0}, ldvarg2=0, ldvarg3=-3, ldvarg4={-5:0}, ldvarg5={-6:0}, ldvarg6=3, ldvarg7={-8:0}, ldvarg8={-7:0}, ldvarg9={-12:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=-3, tmp___1=-4, tmp___10={-11:0}, tmp___11={-12:0}, tmp___12=0, tmp___13=5, tmp___15=1, tmp___2=0, tmp___3={-5:0}, tmp___4={-6:0}, tmp___5=3, tmp___6={-7:0}, tmp___7={-8:0}, tmp___8={-9:0}, tmp___9={-10:0}] [L7328] COND TRUE ldv_state_variable_4 == 1 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=-4, ldvarg1=-2, ldvarg10={-10:0}, ldvarg11={-9:0}, ldvarg12={-11:0}, ldvarg2=0, ldvarg3=-3, ldvarg4={-5:0}, ldvarg5={-6:0}, ldvarg6=3, ldvarg7={-8:0}, ldvarg8={-7:0}, ldvarg9={-12:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=-3, tmp___1=-4, tmp___10={-11:0}, tmp___11={-12:0}, tmp___12=0, tmp___13=5, tmp___15=1, tmp___2=0, tmp___3={-5:0}, tmp___4={-6:0}, tmp___5=3, tmp___6={-7:0}, tmp___7={-8:0}, tmp___8={-9:0}, tmp___9={-10:0}] [L7329] CALL lapbeth_disconnected(lapbeth_callbacks_group1, ldvarg0) VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6936] unsigned char *ptr ; [L6937] struct sk_buff *skb ; [L6938] struct sk_buff *tmp ; VAL [\old(last_index)=0, \old(reason)=-4, banner={28:0}, bcast_addr={22:0}, dev={-14:0}, dev={-14:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, reason=-4, ref_cnt=0, set_impl={29:0}] [L6940] CALL, EXPR ldv_dev_alloc_skb_18(1U) VAL [\old(last_index)=0, \old(length)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L7584] struct sk_buff *tmp ; VAL [\old(last_index)=0, \old(length)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, length=1, ref_cnt=0, set_impl={29:0}] [L7586] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L7745] void *skb ; [L7746] void *tmp___7 ; VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L7748] CALL, EXPR ldv_successful_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(__size)=248, \old(last_index)=0, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=248, \old(last_index)=0, __size=248, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={18446744073709551616:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=248, \old(last_index)=0, __size=248, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={18446744073709551616:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, p={18446744073709551616:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, \old(last_index)=0, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, \old(last_index)=0, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=248, \old(last_index)=0, __size=248, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={18446744073709551616:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, p={18446744073709551616:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=248, \old(last_index)=0, \result={18446744073709551616:0}, __size=248, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={18446744073709551616:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, p={18446744073709551616:0}, ref_cnt=0, set_impl={29:0}] [L7748] RET, EXPR ldv_successful_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_successful_zalloc(sizeof(struct sk_buff___0 ))={18446744073709551616:0}, ref_cnt=0, set_impl={29:0}] [L7748] tmp___7 = ldv_successful_zalloc(sizeof(struct sk_buff___0 )) [L7749] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}, skb={18446744073709551616:0}, tmp___7={18446744073709551616:0}] [L7750] COND FALSE !(! skb) [L7753] CALL ldv_set_add(LDV_SKBS, skb) [L7621] int i ; [L7623] i = 0 VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, e={18446744073709551616:0}, e={18446744073709551616:0}, i=0, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set={0:0}, set={0:0}, set_impl={29:0}] [L7624] COND TRUE 1 VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, e={18446744073709551616:0}, e={18446744073709551616:0}, i=0, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set={0:0}, set={0:0}, set_impl={29:0}] [L7625] COND FALSE !(i < last_index) VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, e={18446744073709551616:0}, e={18446744073709551616:0}, i=0, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set={0:0}, set={0:0}, set_impl={29:0}] [L7635] COND TRUE last_index < 15 [L7636] set_impl[last_index] = e [L7637] last_index = last_index + 1 VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, e={18446744073709551616:0}, e={18446744073709551616:0}, i=0, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set={0:0}, set={0:0}, set_impl={29:0}] [L7753] RET ldv_set_add(LDV_SKBS, skb) [L7754] return (skb); VAL [\old(last_index)=0, \result={18446744073709551616:0}, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}, skb={18446744073709551616:0}, tmp___7={18446744073709551616:0}] [L7586] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, \old(length)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_skb_alloc()={18446744073709551616:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, length=1, ref_cnt=0, set_impl={29:0}] [L7586] tmp = ldv_skb_alloc() [L7587] return (tmp); VAL [\old(last_index)=0, \old(length)=1, \result={18446744073709551616:0}, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, length=1, ref_cnt=0, set_impl={29:0}, tmp={18446744073709551616:0}] [L6940] RET, EXPR ldv_dev_alloc_skb_18(1U) VAL [\old(last_index)=0, \old(reason)=-4, banner={28:0}, bcast_addr={22:0}, dev={-14:0}, dev={-14:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=1, ldv_dev_alloc_skb_18(1U)={18446744073709551616:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, reason=-4, ref_cnt=0, set_impl={29:0}] [L6940] tmp = ldv_dev_alloc_skb_18(1U) [L6941] skb = tmp VAL [\old(last_index)=0, \old(reason)=-4, banner={28:0}, bcast_addr={22:0}, dev={-14:0}, dev={-14:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, reason=-4, ref_cnt=0, set_impl={29:0}, skb={18446744073709551616:0}, tmp={18446744073709551616:0}] [L6942] COND TRUE (unsigned long )skb == (unsigned long )((struct sk_buff *)0) [L7329] RET lapbeth_disconnected(lapbeth_callbacks_group1, ldvarg0) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=-4, ldvarg1=-2, ldvarg10={-10:0}, ldvarg11={-9:0}, ldvarg12={-11:0}, ldvarg2=0, ldvarg3=-3, ldvarg4={-5:0}, ldvarg5={-6:0}, ldvarg6=3, ldvarg7={-8:0}, ldvarg8={-7:0}, ldvarg9={-12:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=-3, tmp___1=-4, tmp___10={-11:0}, tmp___11={-12:0}, tmp___12=0, tmp___13=5, tmp___15=1, tmp___2=0, tmp___3={-5:0}, tmp___4={-6:0}, tmp___5=3, tmp___6={-7:0}, tmp___7={-8:0}, tmp___8={-9:0}, tmp___9={-10:0}] [L7330] ldv_state_variable_4 = 1 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=-4, ldvarg1=-2, ldvarg10={-10:0}, ldvarg11={-9:0}, ldvarg12={-11:0}, ldvarg2=0, ldvarg3=-3, ldvarg4={-5:0}, ldvarg5={-6:0}, ldvarg6=3, ldvarg7={-8:0}, ldvarg8={-7:0}, ldvarg9={-12:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=-3, tmp___1=-4, tmp___10={-11:0}, tmp___11={-12:0}, tmp___12=0, tmp___13=5, tmp___15=1, tmp___2=0, tmp___3={-5:0}, tmp___4={-6:0}, tmp___5=3, tmp___6={-7:0}, tmp___7={-8:0}, tmp___8={-9:0}, tmp___9={-10:0}] [L7333] COND FALSE !(ldv_state_variable_4 == 2) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=-4, ldvarg1=-2, ldvarg10={-10:0}, ldvarg11={-9:0}, ldvarg12={-11:0}, ldvarg2=0, ldvarg3=-3, ldvarg4={-5:0}, ldvarg5={-6:0}, ldvarg6=3, ldvarg7={-8:0}, ldvarg8={-7:0}, ldvarg9={-12:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=-3, tmp___1=-4, tmp___10={-11:0}, tmp___11={-12:0}, tmp___12=0, tmp___13=5, tmp___15=1, tmp___2=0, tmp___3={-5:0}, tmp___4={-6:0}, tmp___5=3, tmp___6={-7:0}, tmp___7={-8:0}, tmp___8={-9:0}, tmp___9={-10:0}] [L7265] tmp___12 = __VERIFIER_nondet_int() [L7267] case 0: [L7354] case 1: [L7372] case 2: VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=-4, ldvarg1=-2, ldvarg10={-10:0}, ldvarg11={-9:0}, ldvarg12={-11:0}, ldvarg2=0, ldvarg3=-3, ldvarg4={-5:0}, ldvarg5={-6:0}, ldvarg6=3, ldvarg7={-8:0}, ldvarg8={-7:0}, ldvarg9={-12:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=-3, tmp___1=-4, tmp___10={-11:0}, tmp___11={-12:0}, tmp___12=2, tmp___13=5, tmp___15=1, tmp___2=0, tmp___3={-5:0}, tmp___4={-6:0}, tmp___5=3, tmp___6={-7:0}, tmp___7={-8:0}, tmp___8={-9:0}, tmp___9={-10:0}] [L7373] COND TRUE ldv_state_variable_0 != 0 [L7374] tmp___15 = __VERIFIER_nondet_int() [L7376] case 0: VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=-4, ldvarg1=-2, ldvarg10={-10:0}, ldvarg11={-9:0}, ldvarg12={-11:0}, ldvarg2=0, ldvarg3=-3, ldvarg4={-5:0}, ldvarg5={-6:0}, ldvarg6=3, ldvarg7={-8:0}, ldvarg8={-7:0}, ldvarg9={-12:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=-3, tmp___1=-4, tmp___10={-11:0}, tmp___11={-12:0}, tmp___12=2, tmp___13=5, tmp___15=0, tmp___2=0, tmp___3={-5:0}, tmp___4={-6:0}, tmp___5=3, tmp___6={-7:0}, tmp___7={-8:0}, tmp___8={-9:0}, tmp___9={-10:0}] [L7377] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L7378] CALL lapbeth_cleanup_driver() [L7140] struct lapbethdev *lapbeth ; [L7141] struct list_head *entry ; [L7142] struct list_head *tmp ; [L7143] struct list_head const *__mptr ; [L7145] FCALL dev_remove_pack(& lapbeth_packet_type) [L7146] CALL unregister_netdevice_notifier(& lapbeth_dev_notifier) [L7963] return __VERIFIER_nondet_int(); [L7146] RET unregister_netdevice_notifier(& lapbeth_dev_notifier) [L7147] FCALL rtnl_lock() [L7148] EXPR lapbeth_devices.next [L7148] entry = lapbeth_devices.next [L7149] EXPR entry->next [L7149] tmp = entry->next [L7159] COND FALSE !((unsigned long )entry != (unsigned long )(& lapbeth_devices)) [L7163] FCALL rtnl_unlock() [L7378] RET lapbeth_cleanup_driver() [L7379] ldv_state_variable_0 = 2 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=-4, ldvarg1=-2, ldvarg10={-10:0}, ldvarg11={-9:0}, ldvarg12={-11:0}, ldvarg2=0, ldvarg3=-3, ldvarg4={-5:0}, ldvarg5={-6:0}, ldvarg6=3, ldvarg7={-8:0}, ldvarg8={-7:0}, ldvarg9={-12:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=-3, tmp___1=-4, tmp___10={-11:0}, tmp___11={-12:0}, tmp___12=2, tmp___13=5, tmp___15=0, tmp___2=0, tmp___3={-5:0}, tmp___4={-6:0}, tmp___5=3, tmp___6={-7:0}, tmp___7={-8:0}, tmp___8={-9:0}, tmp___9={-10:0}] [L7507] CALL ldv_check_final_state() [L7812] int tmp___7 ; [L7814] CALL, EXPR ldv_set_is_empty(LDV_SKBS) [L7703] return (last_index == 0); VAL [\result=0, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set={0:0}, set={0:0}, set_impl={29:0}] [L7814] RET, EXPR ldv_set_is_empty(LDV_SKBS) [L7814] tmp___7 = ldv_set_is_empty(LDV_SKBS) [L7815] COND FALSE !(\read(tmp___7)) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}, tmp___7=0] [L7817] CALL ldv_error() VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6079] reach_error() VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-15:0}, lapbeth_callbacks_group1={-14:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-13:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 36 procedures, 728 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 8.1s, OverallIterations: 7, TraceHistogramMax: 12, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 5.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 7653 SdHoareTripleChecker+Valid, 4.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 7406 mSDsluCounter, 23595 SdHoareTripleChecker+Invalid, 3.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 15774 mSDsCounter, 1749 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4390 IncrementalHoareTripleChecker+Invalid, 6139 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1749 mSolverCounterUnsat, 7821 mSDtfsCounter, 4390 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 421 GetRequests, 385 SyntacticMatches, 0 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 17 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=5330occurred in iteration=6, InterpolantAutomatonStates: 41, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 6 MinimizatonAttempts, 1298 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.5s InterpolantComputationTime, 1431 NumberOfCodeBlocks, 1431 NumberOfCodeBlocksAsserted, 7 NumberOfCheckSat, 1164 ConstructedInterpolants, 0 QuantifiedInterpolants, 2022 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 6 InterpolantComputations, 6 PerfectInterpolantSequences, 3670/3670 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! [2021-12-06 20:39:43,772 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d8ab52a-71b1-48e9-a6f6-c4f641158af5/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Writing human readable error path to file UltimateCounterExample.errorpath Result: FALSE