./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--lapbether.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e19ca921 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--lapbether.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 3c9185451e17cd03a558fe9bd455bfb656de587a9df23cb7cc44d8e38d5b1098 --- Real Ultimate output --- This is Ultimate 0.2.2-dev-e19ca92 [2021-12-22 14:38:00,264 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-22 14:38:00,266 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-22 14:38:00,324 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-22 14:38:00,325 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-22 14:38:00,326 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-22 14:38:00,327 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-22 14:38:00,328 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-22 14:38:00,329 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-22 14:38:00,329 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-22 14:38:00,330 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-22 14:38:00,331 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-22 14:38:00,331 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-22 14:38:00,332 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-22 14:38:00,332 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-22 14:38:00,333 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-22 14:38:00,334 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-22 14:38:00,334 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-22 14:38:00,335 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-22 14:38:00,348 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-22 14:38:00,351 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-22 14:38:00,353 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-22 14:38:00,354 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-22 14:38:00,355 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-22 14:38:00,357 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-22 14:38:00,357 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-22 14:38:00,360 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-22 14:38:00,360 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-22 14:38:00,361 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-22 14:38:00,362 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-22 14:38:00,362 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-22 14:38:00,363 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-22 14:38:00,363 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-22 14:38:00,364 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-22 14:38:00,365 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-22 14:38:00,366 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-22 14:38:00,366 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-22 14:38:00,366 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-22 14:38:00,367 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-22 14:38:00,367 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-22 14:38:00,368 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-22 14:38:00,369 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2021-12-22 14:38:00,385 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-22 14:38:00,385 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-22 14:38:00,386 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-22 14:38:00,386 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-22 14:38:00,386 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-22 14:38:00,387 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-22 14:38:00,387 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-22 14:38:00,387 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-22 14:38:00,387 INFO L138 SettingsManager]: * Use SBE=true [2021-12-22 14:38:00,387 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-22 14:38:00,388 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-22 14:38:00,388 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-22 14:38:00,388 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-22 14:38:00,388 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-22 14:38:00,389 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-22 14:38:00,389 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-22 14:38:00,389 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-22 14:38:00,389 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-22 14:38:00,389 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-22 14:38:00,389 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-22 14:38:00,389 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-22 14:38:00,390 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-22 14:38:00,390 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-22 14:38:00,390 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-22 14:38:00,390 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-22 14:38:00,390 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-22 14:38:00,390 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-22 14:38:00,390 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-22 14:38:00,391 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-22 14:38:00,391 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-22 14:38:00,392 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-22 14:38:00,392 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 3c9185451e17cd03a558fe9bd455bfb656de587a9df23cb7cc44d8e38d5b1098 [2021-12-22 14:38:00,595 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-22 14:38:00,610 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-22 14:38:00,612 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-22 14:38:00,618 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-22 14:38:00,618 INFO L275 PluginConnector]: CDTParser initialized [2021-12-22 14:38:00,619 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--lapbether.ko-entry_point.cil.out.i [2021-12-22 14:38:00,664 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/9d558bfdd/6a912cd4c0434499886dc5d2fc8cf667/FLAG4cdc12341 [2021-12-22 14:38:01,193 INFO L306 CDTParser]: Found 1 translation units. [2021-12-22 14:38:01,194 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--lapbether.ko-entry_point.cil.out.i [2021-12-22 14:38:01,238 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/9d558bfdd/6a912cd4c0434499886dc5d2fc8cf667/FLAG4cdc12341 [2021-12-22 14:38:01,417 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/9d558bfdd/6a912cd4c0434499886dc5d2fc8cf667 [2021-12-22 14:38:01,419 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-22 14:38:01,420 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-22 14:38:01,421 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-22 14:38:01,421 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-22 14:38:01,424 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-22 14:38:01,424 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.12 02:38:01" (1/1) ... [2021-12-22 14:38:01,426 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2f3b3988 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.12 02:38:01, skipping insertion in model container [2021-12-22 14:38:01,426 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.12 02:38:01" (1/1) ... [2021-12-22 14:38:01,430 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-22 14:38:01,505 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-22 14:38:02,153 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--lapbether.ko-entry_point.cil.out.i[174669,174682] [2021-12-22 14:38:02,418 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-22 14:38:02,439 INFO L203 MainTranslator]: Completed pre-run [2021-12-22 14:38:02,556 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--lapbether.ko-entry_point.cil.out.i[174669,174682] [2021-12-22 14:38:02,632 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-22 14:38:02,694 INFO L208 MainTranslator]: Completed translation [2021-12-22 14:38:02,695 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.12 02:38:02 WrapperNode [2021-12-22 14:38:02,695 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-22 14:38:02,696 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-22 14:38:02,696 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-22 14:38:02,696 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-22 14:38:02,701 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.12 02:38:02" (1/1) ... [2021-12-22 14:38:02,739 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.12 02:38:02" (1/1) ... [2021-12-22 14:38:02,810 INFO L137 Inliner]: procedures = 177, calls = 512, calls flagged for inlining = 97, calls inlined = 94, statements flattened = 1880 [2021-12-22 14:38:02,811 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-22 14:38:02,811 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-22 14:38:02,811 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-22 14:38:02,811 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-22 14:38:02,817 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.12 02:38:02" (1/1) ... [2021-12-22 14:38:02,817 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.12 02:38:02" (1/1) ... [2021-12-22 14:38:02,827 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.12 02:38:02" (1/1) ... [2021-12-22 14:38:02,828 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.12 02:38:02" (1/1) ... [2021-12-22 14:38:02,874 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.12 02:38:02" (1/1) ... [2021-12-22 14:38:02,883 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.12 02:38:02" (1/1) ... [2021-12-22 14:38:02,903 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.12 02:38:02" (1/1) ... [2021-12-22 14:38:02,914 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-22 14:38:02,927 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-22 14:38:02,928 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-22 14:38:02,928 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-22 14:38:02,929 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.12 02:38:02" (1/1) ... [2021-12-22 14:38:02,939 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-22 14:38:02,948 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-22 14:38:02,957 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-22 14:38:02,981 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-22 14:38:02,993 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2021-12-22 14:38:02,993 INFO L130 BoogieDeclarations]: Found specification of procedure strncmp [2021-12-22 14:38:02,993 INFO L130 BoogieDeclarations]: Found specification of procedure dev_put [2021-12-22 14:38:02,993 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_put [2021-12-22 14:38:02,993 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-12-22 14:38:02,993 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-12-22 14:38:02,994 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_18 [2021-12-22 14:38:02,994 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_18 [2021-12-22 14:38:02,994 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-12-22 14:38:02,994 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-12-22 14:38:02,994 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-12-22 14:38:02,994 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2021-12-22 14:38:02,994 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2021-12-22 14:38:02,994 INFO L130 BoogieDeclarations]: Found specification of procedure skb_headroom [2021-12-22 14:38:02,994 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_headroom [2021-12-22 14:38:02,995 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2021-12-22 14:38:02,995 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2021-12-22 14:38:02,995 INFO L130 BoogieDeclarations]: Found specification of procedure debug_lockdep_rcu_enabled [2021-12-22 14:38:02,995 INFO L138 BoogieDeclarations]: Found implementation of procedure debug_lockdep_rcu_enabled [2021-12-22 14:38:02,995 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_free [2021-12-22 14:38:02,995 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_free [2021-12-22 14:38:02,995 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-12-22 14:38:02,995 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-12-22 14:38:02,996 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_size_call_parameter [2021-12-22 14:38:02,996 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_is_watching [2021-12-22 14:38:02,996 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_is_watching [2021-12-22 14:38:02,996 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_read_lock_held [2021-12-22 14:38:02,996 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_read_lock_held [2021-12-22 14:38:02,996 INFO L130 BoogieDeclarations]: Found specification of procedure lapbeth_disconnected [2021-12-22 14:38:02,996 INFO L138 BoogieDeclarations]: Found implementation of procedure lapbeth_disconnected [2021-12-22 14:38:02,997 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2021-12-22 14:38:02,997 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2021-12-22 14:38:02,997 INFO L130 BoogieDeclarations]: Found specification of procedure lapbeth_data_transmit [2021-12-22 14:38:02,997 INFO L138 BoogieDeclarations]: Found implementation of procedure lapbeth_data_transmit [2021-12-22 14:38:02,997 INFO L130 BoogieDeclarations]: Found specification of procedure lapbeth_data_indication [2021-12-22 14:38:02,997 INFO L138 BoogieDeclarations]: Found implementation of procedure lapbeth_data_indication [2021-12-22 14:38:02,997 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2021-12-22 14:38:02,998 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-12-22 14:38:02,998 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-12-22 14:38:02,998 INFO L130 BoogieDeclarations]: Found specification of procedure skb_pull [2021-12-22 14:38:02,998 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_pull [2021-12-22 14:38:02,998 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-12-22 14:38:02,998 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-12-22 14:38:02,998 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2021-12-22 14:38:02,999 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2021-12-22 14:38:02,999 INFO L130 BoogieDeclarations]: Found specification of procedure lapbeth_set_mac_address [2021-12-22 14:38:02,999 INFO L138 BoogieDeclarations]: Found implementation of procedure lapbeth_set_mac_address [2021-12-22 14:38:02,999 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-12-22 14:38:02,999 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-12-22 14:38:02,999 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-12-22 14:38:02,999 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_free_int [2021-12-22 14:38:02,999 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_free_int [2021-12-22 14:38:02,999 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-22 14:38:03,000 INFO L130 BoogieDeclarations]: Found specification of procedure x25_type_trans [2021-12-22 14:38:03,000 INFO L138 BoogieDeclarations]: Found implementation of procedure x25_type_trans [2021-12-22 14:38:03,000 INFO L130 BoogieDeclarations]: Found specification of procedure dev_net [2021-12-22 14:38:03,000 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_net [2021-12-22 14:38:03,001 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-12-22 14:38:03,001 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-12-22 14:38:03,002 INFO L130 BoogieDeclarations]: Found specification of procedure lockdep_rcu_suspicious [2021-12-22 14:38:03,002 INFO L138 BoogieDeclarations]: Found implementation of procedure lockdep_rcu_suspicious [2021-12-22 14:38:03,002 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_percpu_size [2021-12-22 14:38:03,002 INFO L130 BoogieDeclarations]: Found specification of procedure lapbeth_get_x25_dev [2021-12-22 14:38:03,003 INFO L138 BoogieDeclarations]: Found implementation of procedure lapbeth_get_x25_dev [2021-12-22 14:38:03,003 INFO L130 BoogieDeclarations]: Found specification of procedure skb_headlen [2021-12-22 14:38:03,003 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_headlen [2021-12-22 14:38:03,003 INFO L130 BoogieDeclarations]: Found specification of procedure netif_running [2021-12-22 14:38:03,003 INFO L138 BoogieDeclarations]: Found implementation of procedure netif_running [2021-12-22 14:38:03,003 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-12-22 14:38:03,003 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_remove [2021-12-22 14:38:03,003 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_remove [2021-12-22 14:38:03,003 INFO L130 BoogieDeclarations]: Found specification of procedure lapbeth_connected [2021-12-22 14:38:03,004 INFO L138 BoogieDeclarations]: Found implementation of procedure lapbeth_connected [2021-12-22 14:38:03,004 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-12-22 14:38:03,004 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-12-22 14:38:03,004 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2021-12-22 14:38:03,004 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2021-12-22 14:38:03,005 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_successful_zalloc [2021-12-22 14:38:03,005 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_successful_zalloc [2021-12-22 14:38:03,005 INFO L130 BoogieDeclarations]: Found specification of procedure netdev_priv [2021-12-22 14:38:03,005 INFO L138 BoogieDeclarations]: Found implementation of procedure netdev_priv [2021-12-22 14:38:03,005 INFO L130 BoogieDeclarations]: Found specification of procedure netdev_get_tx_queue [2021-12-22 14:38:03,005 INFO L138 BoogieDeclarations]: Found implementation of procedure netdev_get_tx_queue [2021-12-22 14:38:03,005 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-22 14:38:03,005 INFO L130 BoogieDeclarations]: Found specification of procedure unregister_netdevice [2021-12-22 14:38:03,005 INFO L138 BoogieDeclarations]: Found implementation of procedure unregister_netdevice [2021-12-22 14:38:03,005 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2021-12-22 14:38:03,006 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-22 14:38:03,006 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-22 14:38:03,412 INFO L234 CfgBuilder]: Building ICFG [2021-12-22 14:38:03,414 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-22 14:38:03,636 INFO L766 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-12-22 14:38:04,354 INFO L275 CfgBuilder]: Performing block encoding [2021-12-22 14:38:04,368 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-22 14:38:04,368 INFO L299 CfgBuilder]: Removed 3 assume(true) statements. [2021-12-22 14:38:04,371 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.12 02:38:04 BoogieIcfgContainer [2021-12-22 14:38:04,372 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-22 14:38:04,373 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-22 14:38:04,373 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-22 14:38:04,376 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-22 14:38:04,376 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 22.12 02:38:01" (1/3) ... [2021-12-22 14:38:04,377 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1a7c103a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.12 02:38:04, skipping insertion in model container [2021-12-22 14:38:04,377 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.12 02:38:02" (2/3) ... [2021-12-22 14:38:04,378 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1a7c103a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.12 02:38:04, skipping insertion in model container [2021-12-22 14:38:04,378 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.12 02:38:04" (3/3) ... [2021-12-22 14:38:04,379 INFO L111 eAbstractionObserver]: Analyzing ICFG 205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--lapbether.ko-entry_point.cil.out.i [2021-12-22 14:38:04,385 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-22 14:38:04,385 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-22 14:38:04,431 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-22 14:38:04,441 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-22 14:38:04,463 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-22 14:38:04,494 INFO L276 IsEmpty]: Start isEmpty. Operand has 727 states, 585 states have (on average 1.488888888888889) internal successors, (871), 595 states have internal predecessors, (871), 106 states have call successors, (106), 35 states have call predecessors, (106), 34 states have return successors, (100), 100 states have call predecessors, (100), 100 states have call successors, (100) [2021-12-22 14:38:04,503 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 151 [2021-12-22 14:38:04,503 INFO L506 BasicCegarLoop]: Found error trace [2021-12-22 14:38:04,504 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-22 14:38:04,504 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-22 14:38:04,508 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-22 14:38:04,508 INFO L85 PathProgramCache]: Analyzing trace with hash -272515885, now seen corresponding path program 1 times [2021-12-22 14:38:04,514 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-22 14:38:04,514 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [78339277] [2021-12-22 14:38:04,514 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-22 14:38:04,515 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-22 14:38:04,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:04,788 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-22 14:38:04,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:04,811 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:04,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:04,834 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:04,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:04,844 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-22 14:38:04,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:04,861 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:04,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:04,872 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:04,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:04,889 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-22 14:38:04,893 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:04,903 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:04,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:04,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:04,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:04,919 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-22 14:38:04,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:04,936 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:04,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:04,947 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:04,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:04,953 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2021-12-22 14:38:04,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:04,968 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:04,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:04,978 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:04,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:04,986 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2021-12-22 14:38:04,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:04,996 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:04,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:05,000 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:05,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:05,004 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2021-12-22 14:38:05,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:05,016 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:05,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:05,020 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:05,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:05,024 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2021-12-22 14:38:05,028 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:05,033 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:05,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:05,037 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:05,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:05,043 INFO L134 CoverageAnalysis]: Checked inductivity of 392 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 392 trivial. 0 not checked. [2021-12-22 14:38:05,045 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-22 14:38:05,045 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [78339277] [2021-12-22 14:38:05,046 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [78339277] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-22 14:38:05,046 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-22 14:38:05,046 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-22 14:38:05,048 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1439714502] [2021-12-22 14:38:05,048 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-22 14:38:05,051 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-22 14:38:05,051 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-22 14:38:05,069 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-22 14:38:05,069 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-12-22 14:38:05,072 INFO L87 Difference]: Start difference. First operand has 727 states, 585 states have (on average 1.488888888888889) internal successors, (871), 595 states have internal predecessors, (871), 106 states have call successors, (106), 35 states have call predecessors, (106), 34 states have return successors, (100), 100 states have call predecessors, (100), 100 states have call successors, (100) Second operand has 4 states, 4 states have (on average 9.5) internal successors, (38), 2 states have internal predecessors, (38), 2 states have call successors, (11), 4 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2021-12-22 14:38:05,589 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-22 14:38:05,589 INFO L93 Difference]: Finished difference Result 1498 states and 2279 transitions. [2021-12-22 14:38:05,590 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-22 14:38:05,591 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.5) internal successors, (38), 2 states have internal predecessors, (38), 2 states have call successors, (11), 4 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 150 [2021-12-22 14:38:05,592 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-22 14:38:05,602 INFO L225 Difference]: With dead ends: 1498 [2021-12-22 14:38:05,603 INFO L226 Difference]: Without dead ends: 763 [2021-12-22 14:38:05,608 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 66 GetRequests, 64 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-12-22 14:38:05,610 INFO L933 BasicCegarLoop]: 1051 mSDtfsCounter, 264 mSDsluCounter, 1298 mSDsCounter, 0 mSdLazyCounter, 250 mSolverCounterSat, 119 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 274 SdHoareTripleChecker+Valid, 2349 SdHoareTripleChecker+Invalid, 369 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 119 IncrementalHoareTripleChecker+Valid, 250 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-22 14:38:05,610 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [274 Valid, 2349 Invalid, 369 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [119 Valid, 250 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-22 14:38:05,625 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 763 states. [2021-12-22 14:38:05,665 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 763 to 714. [2021-12-22 14:38:05,667 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 714 states, 580 states have (on average 1.467241379310345) internal successors, (851), 582 states have internal predecessors, (851), 100 states have call successors, (100), 34 states have call predecessors, (100), 33 states have return successors, (99), 99 states have call predecessors, (99), 99 states have call successors, (99) [2021-12-22 14:38:05,670 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 714 states to 714 states and 1050 transitions. [2021-12-22 14:38:05,671 INFO L78 Accepts]: Start accepts. Automaton has 714 states and 1050 transitions. Word has length 150 [2021-12-22 14:38:05,671 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-22 14:38:05,671 INFO L470 AbstractCegarLoop]: Abstraction has 714 states and 1050 transitions. [2021-12-22 14:38:05,672 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.5) internal successors, (38), 2 states have internal predecessors, (38), 2 states have call successors, (11), 4 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2021-12-22 14:38:05,672 INFO L276 IsEmpty]: Start isEmpty. Operand 714 states and 1050 transitions. [2021-12-22 14:38:05,674 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 151 [2021-12-22 14:38:05,674 INFO L506 BasicCegarLoop]: Found error trace [2021-12-22 14:38:05,674 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-22 14:38:05,675 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-22 14:38:05,675 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-22 14:38:05,675 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-22 14:38:05,675 INFO L85 PathProgramCache]: Analyzing trace with hash -1960355613, now seen corresponding path program 1 times [2021-12-22 14:38:05,675 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-22 14:38:05,676 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1548947890] [2021-12-22 14:38:05,676 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-22 14:38:05,676 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-22 14:38:05,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:05,803 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-22 14:38:05,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:05,818 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:05,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:05,826 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:05,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:05,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-22 14:38:05,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:05,842 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:05,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:05,848 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:05,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:05,852 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-22 14:38:05,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:05,862 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:05,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:05,894 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:05,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:05,899 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-22 14:38:05,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:05,907 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:05,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:05,911 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:05,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:05,915 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2021-12-22 14:38:05,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:05,923 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:05,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:05,927 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:05,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:05,930 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2021-12-22 14:38:05,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:05,936 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:05,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:05,939 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:05,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:05,943 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2021-12-22 14:38:05,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:05,949 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:05,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:05,953 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:05,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:05,960 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2021-12-22 14:38:05,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:05,966 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:05,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:05,970 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:05,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:05,973 INFO L134 CoverageAnalysis]: Checked inductivity of 392 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 392 trivial. 0 not checked. [2021-12-22 14:38:05,974 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-22 14:38:05,974 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1548947890] [2021-12-22 14:38:05,974 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1548947890] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-22 14:38:05,974 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-22 14:38:05,974 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-22 14:38:05,974 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [541099411] [2021-12-22 14:38:05,975 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-22 14:38:05,976 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-22 14:38:05,976 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-22 14:38:05,977 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-22 14:38:05,977 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-12-22 14:38:05,977 INFO L87 Difference]: Start difference. First operand 714 states and 1050 transitions. Second operand has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 4 states have internal predecessors, (38), 2 states have call successors, (11), 4 states have call predecessors, (11), 1 states have return successors, (10), 1 states have call predecessors, (10), 1 states have call successors, (10) [2021-12-22 14:38:06,961 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-22 14:38:06,961 INFO L93 Difference]: Finished difference Result 1851 states and 2800 transitions. [2021-12-22 14:38:06,962 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-22 14:38:06,962 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 4 states have internal predecessors, (38), 2 states have call successors, (11), 4 states have call predecessors, (11), 1 states have return successors, (10), 1 states have call predecessors, (10), 1 states have call successors, (10) Word has length 150 [2021-12-22 14:38:06,962 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-22 14:38:06,968 INFO L225 Difference]: With dead ends: 1851 [2021-12-22 14:38:06,968 INFO L226 Difference]: Without dead ends: 1157 [2021-12-22 14:38:06,970 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 58 GetRequests, 51 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=24, Invalid=48, Unknown=0, NotChecked=0, Total=72 [2021-12-22 14:38:06,971 INFO L933 BasicCegarLoop]: 1596 mSDtfsCounter, 1817 mSDsluCounter, 3149 mSDsCounter, 0 mSdLazyCounter, 714 mSolverCounterSat, 298 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1866 SdHoareTripleChecker+Valid, 4745 SdHoareTripleChecker+Invalid, 1012 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 298 IncrementalHoareTripleChecker+Valid, 714 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2021-12-22 14:38:06,971 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1866 Valid, 4745 Invalid, 1012 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [298 Valid, 714 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2021-12-22 14:38:06,973 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1157 states. [2021-12-22 14:38:07,003 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1157 to 714. [2021-12-22 14:38:07,004 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 714 states, 580 states have (on average 1.4637931034482758) internal successors, (849), 582 states have internal predecessors, (849), 100 states have call successors, (100), 34 states have call predecessors, (100), 33 states have return successors, (99), 99 states have call predecessors, (99), 99 states have call successors, (99) [2021-12-22 14:38:07,007 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 714 states to 714 states and 1048 transitions. [2021-12-22 14:38:07,007 INFO L78 Accepts]: Start accepts. Automaton has 714 states and 1048 transitions. Word has length 150 [2021-12-22 14:38:07,008 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-22 14:38:07,008 INFO L470 AbstractCegarLoop]: Abstraction has 714 states and 1048 transitions. [2021-12-22 14:38:07,008 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 4 states have internal predecessors, (38), 2 states have call successors, (11), 4 states have call predecessors, (11), 1 states have return successors, (10), 1 states have call predecessors, (10), 1 states have call successors, (10) [2021-12-22 14:38:07,008 INFO L276 IsEmpty]: Start isEmpty. Operand 714 states and 1048 transitions. [2021-12-22 14:38:07,010 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 151 [2021-12-22 14:38:07,010 INFO L506 BasicCegarLoop]: Found error trace [2021-12-22 14:38:07,010 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-22 14:38:07,010 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-22 14:38:07,011 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-22 14:38:07,011 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-22 14:38:07,011 INFO L85 PathProgramCache]: Analyzing trace with hash 147056539, now seen corresponding path program 1 times [2021-12-22 14:38:07,011 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-22 14:38:07,012 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [197530184] [2021-12-22 14:38:07,012 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-22 14:38:07,012 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-22 14:38:07,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:07,083 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-22 14:38:07,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:07,092 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:07,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:07,097 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:07,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:07,102 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-22 14:38:07,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:07,109 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:07,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:07,114 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:07,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:07,119 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-22 14:38:07,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:07,127 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:07,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:07,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:07,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:07,140 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-22 14:38:07,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:07,149 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:07,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:07,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:07,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:07,158 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2021-12-22 14:38:07,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:07,165 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:07,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:07,170 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:07,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:07,174 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2021-12-22 14:38:07,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:07,181 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:07,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:07,187 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:07,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:07,191 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2021-12-22 14:38:07,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:07,198 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:07,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:07,214 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:07,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:07,219 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2021-12-22 14:38:07,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:07,227 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:07,229 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:07,234 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:07,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:07,239 INFO L134 CoverageAnalysis]: Checked inductivity of 392 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 392 trivial. 0 not checked. [2021-12-22 14:38:07,240 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-22 14:38:07,241 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [197530184] [2021-12-22 14:38:07,241 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [197530184] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-22 14:38:07,241 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-22 14:38:07,241 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-22 14:38:07,242 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1473036968] [2021-12-22 14:38:07,242 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-22 14:38:07,242 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-22 14:38:07,243 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-22 14:38:07,243 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-22 14:38:07,243 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2021-12-22 14:38:07,244 INFO L87 Difference]: Start difference. First operand 714 states and 1048 transitions. Second operand has 5 states, 5 states have (on average 7.6) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (11), 4 states have call predecessors, (11), 1 states have return successors, (10), 1 states have call predecessors, (10), 1 states have call successors, (10) [2021-12-22 14:38:08,124 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-22 14:38:08,125 INFO L93 Difference]: Finished difference Result 2170 states and 3211 transitions. [2021-12-22 14:38:08,125 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-22 14:38:08,125 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.6) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (11), 4 states have call predecessors, (11), 1 states have return successors, (10), 1 states have call predecessors, (10), 1 states have call successors, (10) Word has length 150 [2021-12-22 14:38:08,125 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-22 14:38:08,131 INFO L225 Difference]: With dead ends: 2170 [2021-12-22 14:38:08,131 INFO L226 Difference]: Without dead ends: 1476 [2021-12-22 14:38:08,132 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 55 GetRequests, 50 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2021-12-22 14:38:08,133 INFO L933 BasicCegarLoop]: 1114 mSDtfsCounter, 1468 mSDsluCounter, 2138 mSDsCounter, 0 mSdLazyCounter, 654 mSolverCounterSat, 271 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1527 SdHoareTripleChecker+Valid, 3252 SdHoareTripleChecker+Invalid, 925 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 271 IncrementalHoareTripleChecker+Valid, 654 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2021-12-22 14:38:08,134 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1527 Valid, 3252 Invalid, 925 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [271 Valid, 654 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2021-12-22 14:38:08,135 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1476 states. [2021-12-22 14:38:08,173 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1476 to 1378. [2021-12-22 14:38:08,175 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1378 states, 1125 states have (on average 1.4746666666666666) internal successors, (1659), 1129 states have internal predecessors, (1659), 186 states have call successors, (186), 67 states have call predecessors, (186), 66 states have return successors, (185), 185 states have call predecessors, (185), 185 states have call successors, (185) [2021-12-22 14:38:08,191 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1378 states to 1378 states and 2030 transitions. [2021-12-22 14:38:08,191 INFO L78 Accepts]: Start accepts. Automaton has 1378 states and 2030 transitions. Word has length 150 [2021-12-22 14:38:08,192 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-22 14:38:08,193 INFO L470 AbstractCegarLoop]: Abstraction has 1378 states and 2030 transitions. [2021-12-22 14:38:08,193 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.6) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (11), 4 states have call predecessors, (11), 1 states have return successors, (10), 1 states have call predecessors, (10), 1 states have call successors, (10) [2021-12-22 14:38:08,193 INFO L276 IsEmpty]: Start isEmpty. Operand 1378 states and 2030 transitions. [2021-12-22 14:38:08,200 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 214 [2021-12-22 14:38:08,202 INFO L506 BasicCegarLoop]: Found error trace [2021-12-22 14:38:08,203 INFO L514 BasicCegarLoop]: trace histogram [11, 11, 11, 11, 11, 11, 11, 11, 11, 11, 11, 11, 11, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-22 14:38:08,203 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-22 14:38:08,203 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-22 14:38:08,203 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-22 14:38:08,203 INFO L85 PathProgramCache]: Analyzing trace with hash -716980191, now seen corresponding path program 1 times [2021-12-22 14:38:08,204 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-22 14:38:08,204 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [470127305] [2021-12-22 14:38:08,204 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-22 14:38:08,204 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-22 14:38:08,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:08,361 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-22 14:38:08,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:08,371 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:08,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:08,375 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:08,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:08,378 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-22 14:38:08,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:08,391 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:08,392 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:08,395 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:08,395 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:08,398 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-22 14:38:08,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:08,403 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:08,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:08,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:08,407 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:08,410 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-22 14:38:08,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:08,415 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:08,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:08,419 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:08,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:08,422 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2021-12-22 14:38:08,424 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:08,429 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:08,430 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:08,432 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:08,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:08,435 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2021-12-22 14:38:08,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:08,439 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:08,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:08,442 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:08,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:08,445 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2021-12-22 14:38:08,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:08,450 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:08,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:08,454 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:08,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:08,457 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2021-12-22 14:38:08,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:08,462 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:08,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:08,465 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:08,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:08,469 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 144 [2021-12-22 14:38:08,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:08,477 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:08,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:08,483 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:08,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:08,486 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 161 [2021-12-22 14:38:08,488 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:08,493 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:08,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:08,496 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:08,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:08,499 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 177 [2021-12-22 14:38:08,501 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:08,509 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:08,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:08,513 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:08,514 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:08,518 INFO L134 CoverageAnalysis]: Checked inductivity of 776 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 776 trivial. 0 not checked. [2021-12-22 14:38:08,518 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-22 14:38:08,518 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [470127305] [2021-12-22 14:38:08,518 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [470127305] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-22 14:38:08,518 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-22 14:38:08,519 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-22 14:38:08,519 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [910528335] [2021-12-22 14:38:08,519 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-22 14:38:08,519 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-22 14:38:08,519 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-22 14:38:08,520 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-22 14:38:08,520 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2021-12-22 14:38:08,520 INFO L87 Difference]: Start difference. First operand 1378 states and 2030 transitions. Second operand has 7 states, 7 states have (on average 7.285714285714286) internal successors, (51), 5 states have internal predecessors, (51), 3 states have call successors, (14), 4 states have call predecessors, (14), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2021-12-22 14:38:09,667 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-22 14:38:09,668 INFO L93 Difference]: Finished difference Result 4273 states and 6404 transitions. [2021-12-22 14:38:09,668 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-22 14:38:09,668 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.285714285714286) internal successors, (51), 5 states have internal predecessors, (51), 3 states have call successors, (14), 4 states have call predecessors, (14), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) Word has length 213 [2021-12-22 14:38:09,670 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-22 14:38:09,682 INFO L225 Difference]: With dead ends: 4273 [2021-12-22 14:38:09,682 INFO L226 Difference]: Without dead ends: 2901 [2021-12-22 14:38:09,689 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 77 GetRequests, 68 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=78, Unknown=0, NotChecked=0, Total=110 [2021-12-22 14:38:09,692 INFO L933 BasicCegarLoop]: 1263 mSDtfsCounter, 1694 mSDsluCounter, 3410 mSDsCounter, 0 mSdLazyCounter, 1249 mSolverCounterSat, 492 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1750 SdHoareTripleChecker+Valid, 4673 SdHoareTripleChecker+Invalid, 1741 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 492 IncrementalHoareTripleChecker+Valid, 1249 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2021-12-22 14:38:09,693 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1750 Valid, 4673 Invalid, 1741 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [492 Valid, 1249 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2021-12-22 14:38:09,697 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2901 states. [2021-12-22 14:38:09,781 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2901 to 2715. [2021-12-22 14:38:09,785 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2715 states, 2219 states have (on average 1.4785939612438035) internal successors, (3281), 2229 states have internal predecessors, (3281), 361 states have call successors, (361), 133 states have call predecessors, (361), 134 states have return successors, (408), 360 states have call predecessors, (408), 360 states have call successors, (408) [2021-12-22 14:38:09,796 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2715 states to 2715 states and 4050 transitions. [2021-12-22 14:38:09,797 INFO L78 Accepts]: Start accepts. Automaton has 2715 states and 4050 transitions. Word has length 213 [2021-12-22 14:38:09,797 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-22 14:38:09,797 INFO L470 AbstractCegarLoop]: Abstraction has 2715 states and 4050 transitions. [2021-12-22 14:38:09,797 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.285714285714286) internal successors, (51), 5 states have internal predecessors, (51), 3 states have call successors, (14), 4 states have call predecessors, (14), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2021-12-22 14:38:09,798 INFO L276 IsEmpty]: Start isEmpty. Operand 2715 states and 4050 transitions. [2021-12-22 14:38:09,805 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 247 [2021-12-22 14:38:09,805 INFO L506 BasicCegarLoop]: Found error trace [2021-12-22 14:38:09,806 INFO L514 BasicCegarLoop]: trace histogram [11, 11, 11, 11, 11, 11, 11, 11, 11, 11, 11, 11, 11, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-22 14:38:09,806 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-22 14:38:09,806 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-22 14:38:09,806 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-22 14:38:09,806 INFO L85 PathProgramCache]: Analyzing trace with hash 1676192007, now seen corresponding path program 1 times [2021-12-22 14:38:09,807 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-22 14:38:09,807 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [700244879] [2021-12-22 14:38:09,807 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-22 14:38:09,807 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-22 14:38:09,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:09,879 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-22 14:38:09,881 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:09,888 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:09,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:09,893 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:09,893 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:09,899 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-22 14:38:09,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:09,904 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:09,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:09,908 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:09,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:09,911 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-22 14:38:09,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:09,916 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:09,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:09,919 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:09,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:09,922 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-22 14:38:09,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:09,926 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:09,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:09,930 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:09,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:09,932 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2021-12-22 14:38:09,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:09,937 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:09,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:09,942 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:09,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:09,949 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2021-12-22 14:38:09,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:09,954 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:09,955 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:09,958 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:09,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:09,964 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2021-12-22 14:38:09,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:09,969 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:09,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:09,973 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:09,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:09,976 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2021-12-22 14:38:09,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:09,983 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:09,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:09,988 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:09,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:09,992 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 144 [2021-12-22 14:38:09,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:09,998 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:09,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,001 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:10,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,005 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 161 [2021-12-22 14:38:10,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,011 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:10,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,015 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:10,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,019 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 177 [2021-12-22 14:38:10,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,024 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:10,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,028 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:10,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,031 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 204 [2021-12-22 14:38:10,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,041 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 212 [2021-12-22 14:38:10,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,049 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:10,051 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,059 INFO L134 CoverageAnalysis]: Checked inductivity of 784 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 774 trivial. 0 not checked. [2021-12-22 14:38:10,059 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-22 14:38:10,060 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [700244879] [2021-12-22 14:38:10,060 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [700244879] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-22 14:38:10,060 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-22 14:38:10,060 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-22 14:38:10,060 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [145336197] [2021-12-22 14:38:10,060 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-22 14:38:10,061 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-22 14:38:10,061 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-22 14:38:10,061 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-22 14:38:10,061 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-12-22 14:38:10,061 INFO L87 Difference]: Start difference. First operand 2715 states and 4050 transitions. Second operand has 6 states, 6 states have (on average 13.333333333333334) internal successors, (80), 3 states have internal predecessors, (80), 2 states have call successors, (17), 5 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 1 states have call successors, (16) [2021-12-22 14:38:10,698 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-22 14:38:10,699 INFO L93 Difference]: Finished difference Result 4265 states and 6462 transitions. [2021-12-22 14:38:10,699 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-22 14:38:10,699 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 13.333333333333334) internal successors, (80), 3 states have internal predecessors, (80), 2 states have call successors, (17), 5 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 1 states have call successors, (16) Word has length 246 [2021-12-22 14:38:10,700 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-22 14:38:10,711 INFO L225 Difference]: With dead ends: 4265 [2021-12-22 14:38:10,711 INFO L226 Difference]: Without dead ends: 2903 [2021-12-22 14:38:10,716 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 79 GetRequests, 73 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=23, Invalid=33, Unknown=0, NotChecked=0, Total=56 [2021-12-22 14:38:10,716 INFO L933 BasicCegarLoop]: 1018 mSDtfsCounter, 767 mSDsluCounter, 1478 mSDsCounter, 0 mSdLazyCounter, 386 mSolverCounterSat, 347 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 771 SdHoareTripleChecker+Valid, 2496 SdHoareTripleChecker+Invalid, 733 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 347 IncrementalHoareTripleChecker+Valid, 386 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-12-22 14:38:10,717 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [771 Valid, 2496 Invalid, 733 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [347 Valid, 386 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-12-22 14:38:10,720 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2903 states. [2021-12-22 14:38:10,785 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2903 to 2733. [2021-12-22 14:38:10,789 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2733 states, 2231 states have (on average 1.476019722097714) internal successors, (3293), 2243 states have internal predecessors, (3293), 361 states have call successors, (361), 133 states have call predecessors, (361), 140 states have return successors, (428), 364 states have call predecessors, (428), 360 states have call successors, (428) [2021-12-22 14:38:10,798 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2733 states to 2733 states and 4082 transitions. [2021-12-22 14:38:10,799 INFO L78 Accepts]: Start accepts. Automaton has 2733 states and 4082 transitions. Word has length 246 [2021-12-22 14:38:10,799 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-22 14:38:10,799 INFO L470 AbstractCegarLoop]: Abstraction has 2733 states and 4082 transitions. [2021-12-22 14:38:10,800 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 13.333333333333334) internal successors, (80), 3 states have internal predecessors, (80), 2 states have call successors, (17), 5 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 1 states have call successors, (16) [2021-12-22 14:38:10,800 INFO L276 IsEmpty]: Start isEmpty. Operand 2733 states and 4082 transitions. [2021-12-22 14:38:10,806 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 262 [2021-12-22 14:38:10,807 INFO L506 BasicCegarLoop]: Found error trace [2021-12-22 14:38:10,807 INFO L514 BasicCegarLoop]: trace histogram [12, 12, 12, 12, 12, 12, 12, 12, 12, 12, 12, 12, 12, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-22 14:38:10,807 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-22 14:38:10,807 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-22 14:38:10,808 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-22 14:38:10,808 INFO L85 PathProgramCache]: Analyzing trace with hash 2076105357, now seen corresponding path program 1 times [2021-12-22 14:38:10,808 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-22 14:38:10,808 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [274150935] [2021-12-22 14:38:10,808 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-22 14:38:10,808 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-22 14:38:10,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,879 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-22 14:38:10,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:10,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,890 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:10,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,893 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-22 14:38:10,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,897 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:10,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,902 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:10,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,909 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-22 14:38:10,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,913 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:10,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,916 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:10,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,921 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-22 14:38:10,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,925 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:10,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,929 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:10,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,932 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2021-12-22 14:38:10,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,938 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:10,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,943 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:10,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,946 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2021-12-22 14:38:10,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,950 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:10,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,953 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:10,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,955 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2021-12-22 14:38:10,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,963 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:10,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,967 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:10,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,970 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2021-12-22 14:38:10,971 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,974 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:10,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,977 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:10,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,980 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 144 [2021-12-22 14:38:10,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,986 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:10,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,988 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:10,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:10,991 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 161 [2021-12-22 14:38:10,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:11,000 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:11,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:11,003 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:11,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:11,005 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 177 [2021-12-22 14:38:11,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:11,015 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:11,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:11,018 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:11,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:11,027 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 206 [2021-12-22 14:38:11,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:11,038 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:11,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:11,049 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:11,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:11,055 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:11,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:11,059 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 14:38:11,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:11,062 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-22 14:38:11,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 14:38:11,066 INFO L134 CoverageAnalysis]: Checked inductivity of 934 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 924 trivial. 0 not checked. [2021-12-22 14:38:11,066 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-22 14:38:11,067 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [274150935] [2021-12-22 14:38:11,068 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [274150935] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-22 14:38:11,068 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-22 14:38:11,069 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-22 14:38:11,069 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [134638014] [2021-12-22 14:38:11,069 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-22 14:38:11,069 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-22 14:38:11,069 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-22 14:38:11,070 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-22 14:38:11,070 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2021-12-22 14:38:11,070 INFO L87 Difference]: Start difference. First operand 2733 states and 4082 transitions. Second operand has 6 states, 6 states have (on average 13.833333333333334) internal successors, (83), 3 states have internal predecessors, (83), 3 states have call successors, (18), 5 states have call predecessors, (18), 1 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) [2021-12-22 14:38:12,271 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-22 14:38:12,272 INFO L93 Difference]: Finished difference Result 8395 states and 12588 transitions. [2021-12-22 14:38:12,272 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-22 14:38:12,272 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 13.833333333333334) internal successors, (83), 3 states have internal predecessors, (83), 3 states have call successors, (18), 5 states have call predecessors, (18), 1 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) Word has length 261 [2021-12-22 14:38:12,273 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-22 14:38:12,294 INFO L225 Difference]: With dead ends: 8395 [2021-12-22 14:38:12,294 INFO L226 Difference]: Without dead ends: 5682 [2021-12-22 14:38:12,301 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 86 GetRequests, 79 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=30, Invalid=42, Unknown=0, NotChecked=0, Total=72 [2021-12-22 14:38:12,302 INFO L933 BasicCegarLoop]: 1732 mSDtfsCounter, 1396 mSDsluCounter, 4164 mSDsCounter, 0 mSdLazyCounter, 1127 mSolverCounterSat, 234 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1467 SdHoareTripleChecker+Valid, 5896 SdHoareTripleChecker+Invalid, 1361 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 234 IncrementalHoareTripleChecker+Valid, 1127 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2021-12-22 14:38:12,302 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1467 Valid, 5896 Invalid, 1361 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [234 Valid, 1127 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2021-12-22 14:38:12,306 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5682 states. [2021-12-22 14:38:12,435 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5682 to 5330. [2021-12-22 14:38:12,442 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5330 states, 4384 states have (on average 1.4726277372262773) internal successors, (6456), 4410 states have internal predecessors, (6456), 665 states have call successors, (665), 265 states have call predecessors, (665), 280 states have return successors, (778), 670 states have call predecessors, (778), 664 states have call successors, (778) [2021-12-22 14:38:12,457 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5330 states to 5330 states and 7899 transitions. [2021-12-22 14:38:12,458 INFO L78 Accepts]: Start accepts. Automaton has 5330 states and 7899 transitions. Word has length 261 [2021-12-22 14:38:12,458 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-22 14:38:12,458 INFO L470 AbstractCegarLoop]: Abstraction has 5330 states and 7899 transitions. [2021-12-22 14:38:12,458 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 13.833333333333334) internal successors, (83), 3 states have internal predecessors, (83), 3 states have call successors, (18), 5 states have call predecessors, (18), 1 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) [2021-12-22 14:38:12,459 INFO L276 IsEmpty]: Start isEmpty. Operand 5330 states and 7899 transitions. [2021-12-22 14:38:12,469 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 262 [2021-12-22 14:38:12,469 INFO L506 BasicCegarLoop]: Found error trace [2021-12-22 14:38:12,469 INFO L514 BasicCegarLoop]: trace histogram [12, 12, 12, 12, 12, 12, 12, 12, 12, 12, 12, 12, 12, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-22 14:38:12,469 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-22 14:38:12,470 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-22 14:38:12,470 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-22 14:38:12,470 INFO L85 PathProgramCache]: Analyzing trace with hash 1757628959, now seen corresponding path program 1 times [2021-12-22 14:38:12,470 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-22 14:38:12,470 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1334889228] [2021-12-22 14:38:12,470 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-22 14:38:12,471 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-22 14:38:12,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-22 14:38:12,590 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-22 14:38:12,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-22 14:38:12,807 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-22 14:38:12,808 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-12-22 14:38:12,808 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-22 14:38:12,810 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-22 14:38:12,812 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1] [2021-12-22 14:38:12,814 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-22 14:38:12,942 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 22.12 02:38:12 BoogieIcfgContainer [2021-12-22 14:38:12,943 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-22 14:38:12,943 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-22 14:38:12,943 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-22 14:38:12,943 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-22 14:38:12,944 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.12 02:38:04" (3/4) ... [2021-12-22 14:38:12,945 INFO L131 WitnessPrinter]: Generating witness for reachability counterexample [2021-12-22 14:38:13,158 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-22 14:38:13,158 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-22 14:38:13,159 INFO L158 Benchmark]: Toolchain (without parser) took 11739.42ms. Allocated memory was 107.0MB in the beginning and 377.5MB in the end (delta: 270.5MB). Free memory was 63.0MB in the beginning and 237.2MB in the end (delta: -174.1MB). Peak memory consumption was 251.6MB. Max. memory is 16.1GB. [2021-12-22 14:38:13,159 INFO L158 Benchmark]: CDTParser took 0.16ms. Allocated memory is still 107.0MB. Free memory is still 89.1MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-22 14:38:13,159 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1274.17ms. Allocated memory was 107.0MB in the beginning and 138.4MB in the end (delta: 31.5MB). Free memory was 62.7MB in the beginning and 89.9MB in the end (delta: -27.1MB). Peak memory consumption was 49.0MB. Max. memory is 16.1GB. [2021-12-22 14:38:13,160 INFO L158 Benchmark]: Boogie Procedure Inliner took 115.23ms. Allocated memory is still 138.4MB. Free memory was 89.9MB in the beginning and 78.7MB in the end (delta: 11.2MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-22 14:38:13,160 INFO L158 Benchmark]: Boogie Preprocessor took 115.53ms. Allocated memory is still 138.4MB. Free memory was 78.7MB in the beginning and 67.6MB in the end (delta: 11.1MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2021-12-22 14:38:13,160 INFO L158 Benchmark]: RCFGBuilder took 1444.43ms. Allocated memory was 138.4MB in the beginning and 234.9MB in the end (delta: 96.5MB). Free memory was 67.6MB in the beginning and 113.8MB in the end (delta: -46.3MB). Peak memory consumption was 54.3MB. Max. memory is 16.1GB. [2021-12-22 14:38:13,160 INFO L158 Benchmark]: TraceAbstraction took 8569.81ms. Allocated memory was 234.9MB in the beginning and 377.5MB in the end (delta: 142.6MB). Free memory was 112.8MB in the beginning and 101.7MB in the end (delta: 11.1MB). Peak memory consumption was 153.7MB. Max. memory is 16.1GB. [2021-12-22 14:38:13,161 INFO L158 Benchmark]: Witness Printer took 215.42ms. Allocated memory is still 377.5MB. Free memory was 101.7MB in the beginning and 237.2MB in the end (delta: -135.4MB). Peak memory consumption was 19.7MB. Max. memory is 16.1GB. [2021-12-22 14:38:13,163 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16ms. Allocated memory is still 107.0MB. Free memory is still 89.1MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1274.17ms. Allocated memory was 107.0MB in the beginning and 138.4MB in the end (delta: 31.5MB). Free memory was 62.7MB in the beginning and 89.9MB in the end (delta: -27.1MB). Peak memory consumption was 49.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 115.23ms. Allocated memory is still 138.4MB. Free memory was 89.9MB in the beginning and 78.7MB in the end (delta: 11.2MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Preprocessor took 115.53ms. Allocated memory is still 138.4MB. Free memory was 78.7MB in the beginning and 67.6MB in the end (delta: 11.1MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * RCFGBuilder took 1444.43ms. Allocated memory was 138.4MB in the beginning and 234.9MB in the end (delta: 96.5MB). Free memory was 67.6MB in the beginning and 113.8MB in the end (delta: -46.3MB). Peak memory consumption was 54.3MB. Max. memory is 16.1GB. * TraceAbstraction took 8569.81ms. Allocated memory was 234.9MB in the beginning and 377.5MB in the end (delta: 142.6MB). Free memory was 112.8MB in the beginning and 101.7MB in the end (delta: 11.1MB). Peak memory consumption was 153.7MB. Max. memory is 16.1GB. * Witness Printer took 215.42ms. Allocated memory is still 377.5MB. Free memory was 101.7MB in the beginning and 237.2MB in the end (delta: -135.4MB). Peak memory consumption was 19.7MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - CounterExampleResult [Line: 6079]: a call to reach_error is reachable a call to reach_error is reachable We found a FailurePath: [L6102] int ldv_state_variable_3 ; [L6103] int LDV_IN_INTERRUPT = 1; [L6104] int ldv_state_variable_2 ; [L6105] struct net_device *lapbeth_netdev_ops_group1 ; [L6106] int ref_cnt ; [L6107] struct sk_buff *lapbeth_callbacks_group0 ; [L6108] struct net_device *lapbeth_callbacks_group1 ; [L6109] int ldv_state_variable_1 ; [L6110] int ldv_state_variable_4 ; [L6111] int ldv_state_variable_0 ; [L6683-L6684] static u8 const bcast_addr[6U] = { 255U, 255U, 255U, 255U, 255U, 255U}; [L6685] static struct list_head lapbeth_devices = {& lapbeth_devices, & lapbeth_devices}; [L6968-L6969] static struct lapb_register_struct const lapbeth_callbacks = {& lapbeth_connected, & lapbeth_connected, & lapbeth_disconnected, & lapbeth_disconnected, & lapbeth_data_indication, & lapbeth_data_transmit}; [L6997-L7000] static struct net_device_ops const lapbeth_netdev_ops = {0, 0, & lapbeth_open, & lapbeth_close, & lapbeth_xmit, 0, 0, 0, & lapbeth_set_mac_address, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L7117] static struct packet_type lapbeth_packet_type = {96U, 0, & lapbeth_rcv, 0, 0, {0, 0}}; [L7118] static struct notifier_block lapbeth_dev_notifier = {& lapbeth_device_event, 0, 0}; [L7119-L7128] static char const banner[37U] = { '\016', 'L', 'A', 'P', 'B', ' ', 'E', 't', 'h', 'e', 'r', 'n', 'e', 't', ' ', 'd', 'r', 'i', 'v', 'e', 'r', ' ', 'v', 'e', 'r', 's', 'i', 'o', 'n', ' ', '0', '.', '0', '2', '\n', '\000'}; [L7169] int ldv_retval_2 ; [L7170] int ldv_retval_0 ; [L7172] int ldv_retval_1 ; [L7607] Element set_impl[15] ; [L7608] int last_index = 0; [L7742] Set LDV_SKBS ; VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L7198] int ldvarg1 ; [L7199] int tmp ; [L7200] int ldvarg3 ; [L7201] int tmp___0 ; [L7202] int ldvarg0 ; [L7203] int tmp___1 ; [L7204] int ldvarg2 ; [L7205] int tmp___2 ; [L7206] struct notifier_block *ldvarg4 ; [L7207] void *tmp___3 ; [L7208] void *ldvarg5 ; [L7209] void *tmp___4 ; [L7210] unsigned long ldvarg6 ; [L7211] unsigned long tmp___5 ; [L7212] struct sk_buff *ldvarg8 ; [L7213] void *tmp___6 ; [L7214] void *ldvarg7 ; [L7215] void *tmp___7 ; [L7216] struct packet_type *ldvarg11 ; [L7217] void *tmp___8 ; [L7218] struct sk_buff *ldvarg10 ; [L7219] void *tmp___9 ; [L7220] struct net_device *ldvarg12 ; [L7221] void *tmp___10 ; [L7222] struct net_device *ldvarg9 ; [L7223] void *tmp___11 ; [L7224] int tmp___12 ; [L7225] int tmp___13 ; [L7226] int tmp___14 ; [L7227] int tmp___15 ; [L7228] int tmp___16 ; [L7229] int tmp___17 ; [L7231] tmp = __VERIFIER_nondet_int() [L7232] ldvarg1 = tmp [L7233] tmp___0 = __VERIFIER_nondet_int() [L7234] ldvarg3 = tmp___0 [L7235] tmp___1 = __VERIFIER_nondet_int() [L7236] ldvarg0 = tmp___1 [L7237] tmp___2 = __VERIFIER_nondet_int() [L7238] ldvarg2 = tmp___2 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=-2, ldvarg1=0, ldvarg2=0, ldvarg3=0, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___2=0] [L7239] CALL, EXPR ldv_successful_zalloc(24UL) VAL [\old(__size)=24, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=24, __size=24, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-3:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=24, __size=24, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-3:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-3:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=24, __size=24, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-3:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-3:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=24, \result={-3:0}, __size=24, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-3:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-3:0}, ref_cnt=0, set_impl={29:0}] [L7239] RET, EXPR ldv_successful_zalloc(24UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_successful_zalloc(24UL)={-3:0}, ldvarg0=-2, ldvarg1=0, ldvarg2=0, ldvarg3=0, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___2=0] [L7239] tmp___3 = ldv_successful_zalloc(24UL) [L7240] ldvarg4 = (struct notifier_block *)tmp___3 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=-2, ldvarg1=0, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___2=0, tmp___3={-3:0}] [L7241] CALL, EXPR ldv_successful_zalloc(1UL) VAL [\old(__size)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=1, __size=1, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-4:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=1, __size=1, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-4:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-4:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=1, __size=1, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-4:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-4:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=1, \result={-4:0}, __size=1, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-4:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-4:0}, ref_cnt=0, set_impl={29:0}] [L7241] RET, EXPR ldv_successful_zalloc(1UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_successful_zalloc(1UL)={-4:0}, ldvarg0=-2, ldvarg1=0, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___2=0, tmp___3={-3:0}] [L7241] tmp___4 = ldv_successful_zalloc(1UL) [L7242] ldvarg5 = tmp___4 [L7243] tmp___5 = __VERIFIER_nondet_ulong() [L7244] ldvarg6 = tmp___5 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=-2, ldvarg1=0, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3] [L7245] CALL, EXPR ldv_successful_zalloc(232UL) VAL [\old(__size)=232, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-5:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-5:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-5:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-5:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-5:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=232, \result={-5:0}, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-5:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-5:0}, ref_cnt=0, set_impl={29:0}] [L7245] RET, EXPR ldv_successful_zalloc(232UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_successful_zalloc(232UL)={-5:0}, ldvarg0=-2, ldvarg1=0, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3] [L7245] tmp___6 = ldv_successful_zalloc(232UL) [L7246] ldvarg8 = (struct sk_buff *)tmp___6 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=-2, ldvarg1=0, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg8={-5:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}] [L7247] CALL, EXPR ldv_successful_zalloc(1UL) VAL [\old(__size)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=1, __size=1, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-6:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=1, __size=1, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-6:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-6:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=1, __size=1, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-6:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-6:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=1, \result={-6:0}, __size=1, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-6:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-6:0}, ref_cnt=0, set_impl={29:0}] [L7247] RET, EXPR ldv_successful_zalloc(1UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_successful_zalloc(1UL)={-6:0}, ldvarg0=-2, ldvarg1=0, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg8={-5:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}] [L7247] tmp___7 = ldv_successful_zalloc(1UL) [L7248] ldvarg7 = tmp___7 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=-2, ldvarg1=0, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}] [L7249] CALL, EXPR ldv_successful_zalloc(56UL) VAL [\old(__size)=56, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=56, __size=56, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-7:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=56, __size=56, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-7:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-7:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=56, __size=56, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-7:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-7:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=56, \result={-7:0}, __size=56, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-7:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-7:0}, ref_cnt=0, set_impl={29:0}] [L7249] RET, EXPR ldv_successful_zalloc(56UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_successful_zalloc(56UL)={-7:0}, ldvarg0=-2, ldvarg1=0, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}] [L7249] tmp___8 = ldv_successful_zalloc(56UL) [L7250] ldvarg11 = (struct packet_type *)tmp___8 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=-2, ldvarg1=0, ldvarg11={-7:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}] [L7251] CALL, EXPR ldv_successful_zalloc(232UL) VAL [\old(__size)=232, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-8:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-8:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-8:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-8:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-8:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=232, \result={-8:0}, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-8:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-8:0}, ref_cnt=0, set_impl={29:0}] [L7251] RET, EXPR ldv_successful_zalloc(232UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_successful_zalloc(232UL)={-8:0}, ldvarg0=-2, ldvarg1=0, ldvarg11={-7:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}] [L7251] tmp___9 = ldv_successful_zalloc(232UL) [L7252] ldvarg10 = (struct sk_buff *)tmp___9 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=-2, ldvarg1=0, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7253] CALL, EXPR ldv_successful_zalloc(3264UL) VAL [\old(__size)=3264, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-9:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-9:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-9:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-9:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-9:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=3264, \result={-9:0}, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-9:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-9:0}, ref_cnt=0, set_impl={29:0}] [L7253] RET, EXPR ldv_successful_zalloc(3264UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_successful_zalloc(3264UL)={-9:0}, ldvarg0=-2, ldvarg1=0, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7253] tmp___10 = ldv_successful_zalloc(3264UL) [L7254] ldvarg12 = (struct net_device *)tmp___10 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=-2, ldvarg1=0, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___10={-9:0}, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7255] CALL, EXPR ldv_successful_zalloc(3264UL) VAL [\old(__size)=3264, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-10:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-10:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-10:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-10:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-10:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=3264, \result={-10:0}, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-10:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-10:0}, ref_cnt=0, set_impl={29:0}] [L7255] RET, EXPR ldv_successful_zalloc(3264UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_successful_zalloc(3264UL)={-10:0}, ldvarg0=-2, ldvarg1=0, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___10={-9:0}, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7255] tmp___11 = ldv_successful_zalloc(3264UL) [L7256] ldvarg9 = (struct net_device *)tmp___11 [L7257] CALL ldv_initialize() [L7761] CALL ldv_set_init(LDV_SKBS) [L7613] set = set_impl [L7614] last_index = 0 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set={0:0}, set={29:0}, set_impl={29:0}] [L7761] RET ldv_set_init(LDV_SKBS) [L7257] RET ldv_initialize() [L7258] ldv_state_variable_4 = 0 [L7259] ldv_state_variable_1 = 0 [L7260] ref_cnt = 0 [L7261] ldv_state_variable_0 = 1 [L7262] ldv_state_variable_3 = 0 [L7263] ldv_state_variable_2 = 0 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=-2, ldvarg1=0, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___10={-9:0}, tmp___11={-10:0}, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7265] tmp___12 = __VERIFIER_nondet_int() [L7267] case 0: [L7354] case 1: [L7372] case 2: VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=-2, ldvarg1=0, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=2, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7373] COND TRUE ldv_state_variable_0 != 0 [L7374] tmp___15 = __VERIFIER_nondet_int() [L7376] case 0: [L7384] case 1: VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=-2, ldvarg1=0, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=2, tmp___15=1, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7385] COND TRUE ldv_state_variable_0 == 1 [L7386] CALL, EXPR lapbeth_init_driver() [L7132] FCALL dev_add_pack(& lapbeth_packet_type) [L7133] CALL register_netdevice_notifier(& lapbeth_dev_notifier) [L7932] return __VERIFIER_nondet_int(); [L7133] RET register_netdevice_notifier(& lapbeth_dev_notifier) [L7135] return (0); VAL [\result=0, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L7386] RET, EXPR lapbeth_init_driver() [L7386] ldv_retval_0 = lapbeth_init_driver() [L7387] COND TRUE ldv_retval_0 == 0 [L7388] ldv_state_variable_0 = 3 [L7389] ldv_state_variable_2 = 1 [L7390] ldv_state_variable_3 = 1 [L7391] CALL ldv_net_device_ops_3() [L7177] void *tmp ; VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L7179] CALL, EXPR ldv_successful_zalloc(3264UL) VAL [\old(__size)=3264, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-11:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-11:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, p={-11:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-11:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, p={-11:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=3264, \result={-11:0}, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-11:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, p={-11:0}, ref_cnt=0, set_impl={29:0}] [L7179] RET, EXPR ldv_successful_zalloc(3264UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_successful_zalloc(3264UL)={-11:0}, ref_cnt=0, set_impl={29:0}] [L7179] tmp = ldv_successful_zalloc(3264UL) [L7180] lapbeth_netdev_ops_group1 = (struct net_device *)tmp VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}, tmp={-11:0}] [L7391] RET ldv_net_device_ops_3() [L7392] ldv_state_variable_1 = 1 [L7393] ldv_state_variable_4 = 1 [L7394] CALL ldv_initialize_lapb_register_struct_4() [L7186] void *tmp ; [L7187] void *tmp___0 ; VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L7189] CALL, EXPR ldv_successful_zalloc(3264UL) VAL [\old(__size)=3264, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-12:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-12:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, p={-12:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-12:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, p={-12:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=3264, \result={-12:0}, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-12:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, p={-12:0}, ref_cnt=0, set_impl={29:0}] [L7189] RET, EXPR ldv_successful_zalloc(3264UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_successful_zalloc(3264UL)={-12:0}, ref_cnt=0, set_impl={29:0}] [L7189] tmp = ldv_successful_zalloc(3264UL) [L7190] lapbeth_callbacks_group1 = (struct net_device *)tmp VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}, tmp={-12:0}] [L7191] CALL, EXPR ldv_successful_zalloc(232UL) VAL [\old(__size)=232, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-13:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-13:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, p={-13:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-13:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, p={-13:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=232, \result={-13:0}, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-13:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, p={-13:0}, ref_cnt=0, set_impl={29:0}] [L7191] RET, EXPR ldv_successful_zalloc(232UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_successful_zalloc(232UL)={-13:0}, ref_cnt=0, set_impl={29:0}, tmp={-12:0}] [L7191] tmp___0 = ldv_successful_zalloc(232UL) [L7192] lapbeth_callbacks_group0 = (struct sk_buff *)tmp___0 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}, tmp={-12:0}, tmp___0={-13:0}] [L7394] RET ldv_initialize_lapb_register_struct_4() [L7397] COND FALSE !(ldv_retval_0 != 0) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=-2, ldvarg1=0, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=2, tmp___15=1, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7265] tmp___12 = __VERIFIER_nondet_int() [L7267] case 0: VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=-2, ldvarg1=0, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=0, tmp___15=1, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7268] COND TRUE ldv_state_variable_4 != 0 [L7269] tmp___13 = __VERIFIER_nondet_int() [L7271] case 0: [L7283] case 1: [L7295] case 2: [L7303] case 3: [L7315] case 4: [L7327] case 5: VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=-2, ldvarg1=0, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=0, tmp___13=5, tmp___15=1, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7328] COND TRUE ldv_state_variable_4 == 1 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=-2, ldvarg1=0, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=0, tmp___13=5, tmp___15=1, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7329] CALL lapbeth_disconnected(lapbeth_callbacks_group1, ldvarg0) VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6936] unsigned char *ptr ; [L6937] struct sk_buff *skb ; [L6938] struct sk_buff *tmp ; VAL [\old(last_index)=0, \old(reason)=-2, banner={28:0}, bcast_addr={22:0}, dev={-12:0}, dev={-12:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, reason=-2, ref_cnt=0, set_impl={29:0}] [L6940] CALL, EXPR ldv_dev_alloc_skb_18(1U) VAL [\old(last_index)=0, \old(length)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L7584] struct sk_buff *tmp ; VAL [\old(last_index)=0, \old(length)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, length=1, ref_cnt=0, set_impl={29:0}] [L7586] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L7745] void *skb ; [L7746] void *tmp___7 ; VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L7748] CALL, EXPR ldv_successful_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(__size)=248, \old(last_index)=0, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=248, \old(last_index)=0, __size=248, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={18446744073709551616:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=248, \old(last_index)=0, __size=248, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={18446744073709551616:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, p={18446744073709551616:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, \old(last_index)=0, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) VAL [\old(cond)=1, \old(last_index)=0, banner={28:0}, bcast_addr={22:0}, cond=1, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=248, \old(last_index)=0, __size=248, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={18446744073709551616:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, p={18446744073709551616:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; VAL [\old(__size)=248, \old(last_index)=0, \result={18446744073709551616:0}, __size=248, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={18446744073709551616:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, p={18446744073709551616:0}, ref_cnt=0, set_impl={29:0}] [L7748] RET, EXPR ldv_successful_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_successful_zalloc(sizeof(struct sk_buff___0 ))={18446744073709551616:0}, ref_cnt=0, set_impl={29:0}] [L7748] tmp___7 = ldv_successful_zalloc(sizeof(struct sk_buff___0 )) [L7749] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}, skb={18446744073709551616:0}, tmp___7={18446744073709551616:0}] [L7750] COND FALSE !(! skb) [L7753] CALL ldv_set_add(LDV_SKBS, skb) [L7621] int i ; [L7623] i = 0 VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, e={18446744073709551616:0}, e={18446744073709551616:0}, i=0, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set={0:0}, set={0:0}, set_impl={29:0}] [L7624] COND TRUE 1 VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, e={18446744073709551616:0}, e={18446744073709551616:0}, i=0, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set={0:0}, set={0:0}, set_impl={29:0}] [L7625] COND FALSE !(i < last_index) VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, e={18446744073709551616:0}, e={18446744073709551616:0}, i=0, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set={0:0}, set={0:0}, set_impl={29:0}] [L7635] COND TRUE last_index < 15 [L7636] set_impl[last_index] = e [L7637] last_index = last_index + 1 VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, e={18446744073709551616:0}, e={18446744073709551616:0}, i=0, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set={0:0}, set={0:0}, set_impl={29:0}] [L7753] RET ldv_set_add(LDV_SKBS, skb) [L7754] return (skb); VAL [\old(last_index)=0, \result={18446744073709551616:0}, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}, skb={18446744073709551616:0}, tmp___7={18446744073709551616:0}] [L7586] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, \old(length)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_skb_alloc()={18446744073709551616:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, length=1, ref_cnt=0, set_impl={29:0}] [L7586] tmp = ldv_skb_alloc() [L7587] return (tmp); VAL [\old(last_index)=0, \old(length)=1, \result={18446744073709551616:0}, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, length=1, ref_cnt=0, set_impl={29:0}, tmp={18446744073709551616:0}] [L6940] RET, EXPR ldv_dev_alloc_skb_18(1U) VAL [\old(last_index)=0, \old(reason)=-2, banner={28:0}, bcast_addr={22:0}, dev={-12:0}, dev={-12:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, ldv_dev_alloc_skb_18(1U)={18446744073709551616:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, reason=-2, ref_cnt=0, set_impl={29:0}] [L6940] tmp = ldv_dev_alloc_skb_18(1U) [L6941] skb = tmp VAL [\old(last_index)=0, \old(reason)=-2, banner={28:0}, bcast_addr={22:0}, dev={-12:0}, dev={-12:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, reason=-2, ref_cnt=0, set_impl={29:0}, skb={18446744073709551616:0}, tmp={18446744073709551616:0}] [L6942] COND TRUE (unsigned long )skb == (unsigned long )((struct sk_buff *)0) [L7329] RET lapbeth_disconnected(lapbeth_callbacks_group1, ldvarg0) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=-2, ldvarg1=0, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=0, tmp___13=5, tmp___15=1, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7330] ldv_state_variable_4 = 1 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=-2, ldvarg1=0, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=0, tmp___13=5, tmp___15=1, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7333] COND FALSE !(ldv_state_variable_4 == 2) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=-2, ldvarg1=0, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=0, tmp___13=5, tmp___15=1, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7265] tmp___12 = __VERIFIER_nondet_int() [L7267] case 0: [L7354] case 1: [L7372] case 2: VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=-2, ldvarg1=0, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=2, tmp___13=5, tmp___15=1, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7373] COND TRUE ldv_state_variable_0 != 0 [L7374] tmp___15 = __VERIFIER_nondet_int() [L7376] case 0: VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=-2, ldvarg1=0, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=2, tmp___13=5, tmp___15=0, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7377] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L7378] CALL lapbeth_cleanup_driver() [L7140] struct lapbethdev *lapbeth ; [L7141] struct list_head *entry ; [L7142] struct list_head *tmp ; [L7143] struct list_head const *__mptr ; [L7145] FCALL dev_remove_pack(& lapbeth_packet_type) [L7146] CALL unregister_netdevice_notifier(& lapbeth_dev_notifier) [L7963] return __VERIFIER_nondet_int(); [L7146] RET unregister_netdevice_notifier(& lapbeth_dev_notifier) [L7147] FCALL rtnl_lock() [L7148] EXPR lapbeth_devices.next [L7148] entry = lapbeth_devices.next [L7149] EXPR entry->next [L7149] tmp = entry->next [L7159] COND FALSE !((unsigned long )entry != (unsigned long )(& lapbeth_devices)) [L7163] FCALL rtnl_unlock() [L7378] RET lapbeth_cleanup_driver() [L7379] ldv_state_variable_0 = 2 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=-2, ldvarg1=0, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=0, tmp___0=0, tmp___1=-2, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=2, tmp___13=5, tmp___15=0, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7507] CALL ldv_check_final_state() [L7812] int tmp___7 ; [L7814] CALL, EXPR ldv_set_is_empty(LDV_SKBS) [L7703] return (last_index == 0); VAL [\result=0, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set={0:0}, set={0:0}, set_impl={29:0}] [L7814] RET, EXPR ldv_set_is_empty(LDV_SKBS) [L7814] tmp___7 = ldv_set_is_empty(LDV_SKBS) [L7815] COND FALSE !(\read(tmp___7)) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}, tmp___7=0] [L7817] CALL ldv_error() VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6079] reach_error() VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 36 procedures, 728 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 8.4s, OverallIterations: 7, TraceHistogramMax: 12, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 5.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 7655 SdHoareTripleChecker+Valid, 4.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 7406 mSDsluCounter, 23411 SdHoareTripleChecker+Invalid, 3.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 15637 mSDsCounter, 1761 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4380 IncrementalHoareTripleChecker+Invalid, 6141 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1761 mSolverCounterUnsat, 7774 mSDtfsCounter, 4380 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 421 GetRequests, 385 SyntacticMatches, 0 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 17 ImplicationChecksByTransitivity, 0.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=5330occurred in iteration=6, InterpolantAutomatonStates: 41, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 6 MinimizatonAttempts, 1298 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.5s InterpolantComputationTime, 1431 NumberOfCodeBlocks, 1431 NumberOfCodeBlocksAsserted, 7 NumberOfCheckSat, 1164 ConstructedInterpolants, 0 QuantifiedInterpolants, 2022 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 6 InterpolantComputations, 6 PerfectInterpolantSequences, 3670/3670 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! [2021-12-22 14:38:13,210 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Writing human readable error path to file UltimateCounterExample.errorpath Result: FALSE