./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_cisco.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0f8a17c6 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/config/TaipanReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_cisco.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/config/svcomp-Reach-64bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash aa96c32cec5c31a75c9cdd0122db38bdeb379765e4b6aca9c91d1bb4fedaed44 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-0f8a17c [2021-11-19 15:05:05,080 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-19 15:05:05,082 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-19 15:05:05,115 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-19 15:05:05,116 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-19 15:05:05,117 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-19 15:05:05,123 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-19 15:05:05,126 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-19 15:05:05,130 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-19 15:05:05,132 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-19 15:05:05,134 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-19 15:05:05,138 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-19 15:05:05,139 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-19 15:05:05,148 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-19 15:05:05,151 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-19 15:05:05,154 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-19 15:05:05,159 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-19 15:05:05,162 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-19 15:05:05,169 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-19 15:05:05,172 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-19 15:05:05,180 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-19 15:05:05,182 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-19 15:05:05,184 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-19 15:05:05,185 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-19 15:05:05,189 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-19 15:05:05,190 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-19 15:05:05,190 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-19 15:05:05,192 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-19 15:05:05,193 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-19 15:05:05,194 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-19 15:05:05,195 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-19 15:05:05,196 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-19 15:05:05,197 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-19 15:05:05,198 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-19 15:05:05,200 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-19 15:05:05,200 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-19 15:05:05,201 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-19 15:05:05,202 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-19 15:05:05,202 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-19 15:05:05,204 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-19 15:05:05,204 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-19 15:05:05,205 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/config/svcomp-Reach-64bit-Taipan_Default.epf [2021-11-19 15:05:05,239 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-19 15:05:05,239 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-19 15:05:05,240 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-19 15:05:05,240 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-19 15:05:05,240 INFO L138 SettingsManager]: * User list type=DISABLED [2021-11-19 15:05:05,241 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2021-11-19 15:05:05,241 INFO L138 SettingsManager]: * Explicit value domain=true [2021-11-19 15:05:05,241 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2021-11-19 15:05:05,241 INFO L138 SettingsManager]: * Octagon Domain=false [2021-11-19 15:05:05,242 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2021-11-19 15:05:05,242 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2021-11-19 15:05:05,242 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2021-11-19 15:05:05,242 INFO L138 SettingsManager]: * Interval Domain=false [2021-11-19 15:05:05,243 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2021-11-19 15:05:05,243 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2021-11-19 15:05:05,243 INFO L138 SettingsManager]: * Simplification Technique=SIMPLIFY_QUICK [2021-11-19 15:05:05,244 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-19 15:05:05,244 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-19 15:05:05,245 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-19 15:05:05,245 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-19 15:05:05,245 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-19 15:05:05,245 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-19 15:05:05,245 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2021-11-19 15:05:05,246 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-19 15:05:05,246 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-19 15:05:05,246 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-19 15:05:05,246 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-19 15:05:05,247 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-19 15:05:05,247 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-19 15:05:05,247 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-19 15:05:05,247 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-19 15:05:05,248 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-19 15:05:05,248 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2021-11-19 15:05:05,248 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-19 15:05:05,248 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-19 15:05:05,249 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-19 15:05:05,249 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-11-19 15:05:05,249 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> aa96c32cec5c31a75c9cdd0122db38bdeb379765e4b6aca9c91d1bb4fedaed44 [2021-11-19 15:05:05,550 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-19 15:05:05,577 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-19 15:05:05,581 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-19 15:05:05,582 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-19 15:05:05,583 INFO L275 PluginConnector]: CDTParser initialized [2021-11-19 15:05:05,586 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_cisco.ko-entry_point.cil.out.i [2021-11-19 15:05:05,710 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/data/157348f1a/dd402cbfd1944c97aa785eb3c0af791c/FLAG9d5daa213 [2021-11-19 15:05:06,673 INFO L306 CDTParser]: Found 1 translation units. [2021-11-19 15:05:06,677 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_cisco.ko-entry_point.cil.out.i [2021-11-19 15:05:06,727 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/data/157348f1a/dd402cbfd1944c97aa785eb3c0af791c/FLAG9d5daa213 [2021-11-19 15:05:07,053 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/data/157348f1a/dd402cbfd1944c97aa785eb3c0af791c [2021-11-19 15:05:07,056 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-19 15:05:07,058 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-19 15:05:07,060 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-19 15:05:07,060 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-19 15:05:07,064 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-19 15:05:07,065 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 03:05:07" (1/1) ... [2021-11-19 15:05:07,067 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5ee54e68 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 03:05:07, skipping insertion in model container [2021-11-19 15:05:07,067 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 03:05:07" (1/1) ... [2021-11-19 15:05:07,076 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-19 15:05:07,177 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-19 15:05:08,298 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_cisco.ko-entry_point.cil.out.i[158033,158046] [2021-11-19 15:05:08,675 INFO L207 PostProcessor]: Analyzing one entry point: main [2021-11-19 15:05:08,693 ERROR L326 MainTranslator]: Unsupported Syntax: Found a cast between two array/pointer types where the value type is smaller than the cast-to type while using memory model HoenickeLindenmann_Original (while Not using bitvector translation) [2021-11-19 15:05:08,694 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieTranslatorObserver@114005d4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 03:05:08, skipping insertion in model container [2021-11-19 15:05:08,694 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-19 15:05:08,695 INFO L184 ToolchainWalker]: Toolchain execution was canceled (user or tool) before executing de.uni_freiburg.informatik.ultimate.boogie.procedureinliner [2021-11-19 15:05:08,697 INFO L158 Benchmark]: Toolchain (without parser) took 1637.30ms. Allocated memory is still 113.2MB. Free memory was 86.3MB in the beginning and 75.6MB in the end (delta: 10.6MB). Peak memory consumption was 47.7MB. Max. memory is 16.1GB. [2021-11-19 15:05:08,697 INFO L158 Benchmark]: CDTParser took 0.38ms. Allocated memory is still 83.9MB. Free memory was 55.4MB in the beginning and 55.4MB in the end (delta: 29.5kB). There was no memory consumed. Max. memory is 16.1GB. [2021-11-19 15:05:08,698 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1634.38ms. Allocated memory is still 113.2MB. Free memory was 86.3MB in the beginning and 76.1MB in the end (delta: 10.1MB). Peak memory consumption was 47.7MB. Max. memory is 16.1GB. [2021-11-19 15:05:08,700 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.38ms. Allocated memory is still 83.9MB. Free memory was 55.4MB in the beginning and 55.4MB in the end (delta: 29.5kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1634.38ms. Allocated memory is still 113.2MB. Free memory was 86.3MB in the beginning and 76.1MB in the end (delta: 10.1MB). Peak memory consumption was 47.7MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - UnsupportedSyntaxResult [Line: 5641]: Unsupported Syntax Found a cast between two array/pointer types where the value type is smaller than the cast-to type while using memory model HoenickeLindenmann_Original (while Not using bitvector translation) RESULT: Ultimate could not prove your program: Toolchain returned no result. Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/config/TaipanReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_cisco.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/config/svcomp-Reach-64bit-Taipan_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash aa96c32cec5c31a75c9cdd0122db38bdeb379765e4b6aca9c91d1bb4fedaed44 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-0f8a17c [2021-11-19 15:05:11,247 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-19 15:05:11,250 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-19 15:05:11,311 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-19 15:05:11,312 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-19 15:05:11,317 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-19 15:05:11,320 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-19 15:05:11,325 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-19 15:05:11,328 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-19 15:05:11,337 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-19 15:05:11,339 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-19 15:05:11,341 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-19 15:05:11,341 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-19 15:05:11,344 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-19 15:05:11,347 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-19 15:05:11,351 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-19 15:05:11,353 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-19 15:05:11,354 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-19 15:05:11,356 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-19 15:05:11,364 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-19 15:05:11,366 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-19 15:05:11,368 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-19 15:05:11,371 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-19 15:05:11,373 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-19 15:05:11,382 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-19 15:05:11,382 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-19 15:05:11,383 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-19 15:05:11,385 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-19 15:05:11,386 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-19 15:05:11,387 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-19 15:05:11,388 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-19 15:05:11,389 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-19 15:05:11,391 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-19 15:05:11,392 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-19 15:05:11,394 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-19 15:05:11,394 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-19 15:05:11,396 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-19 15:05:11,396 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-19 15:05:11,396 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-19 15:05:11,398 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-19 15:05:11,399 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-19 15:05:11,405 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/config/svcomp-Reach-64bit-Taipan_Bitvector.epf [2021-11-19 15:05:11,470 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-19 15:05:11,470 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-19 15:05:11,472 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-19 15:05:11,472 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-19 15:05:11,473 INFO L138 SettingsManager]: * User list type=DISABLED [2021-11-19 15:05:11,473 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2021-11-19 15:05:11,473 INFO L138 SettingsManager]: * Explicit value domain=true [2021-11-19 15:05:11,473 INFO L138 SettingsManager]: * Octagon Domain=false [2021-11-19 15:05:11,474 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2021-11-19 15:05:11,474 INFO L138 SettingsManager]: * Interval Domain=false [2021-11-19 15:05:11,477 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-19 15:05:11,477 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-19 15:05:11,477 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-19 15:05:11,478 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-19 15:05:11,478 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-19 15:05:11,478 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2021-11-19 15:05:11,478 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2021-11-19 15:05:11,479 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2021-11-19 15:05:11,479 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-19 15:05:11,479 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-19 15:05:11,480 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-19 15:05:11,480 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-19 15:05:11,480 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-19 15:05:11,480 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-19 15:05:11,481 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-19 15:05:11,481 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-19 15:05:11,481 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-19 15:05:11,482 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-19 15:05:11,482 INFO L138 SettingsManager]: * Trace refinement strategy=WALRUS [2021-11-19 15:05:11,482 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2021-11-19 15:05:11,483 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-19 15:05:11,483 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-19 15:05:11,483 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-11-19 15:05:11,483 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> aa96c32cec5c31a75c9cdd0122db38bdeb379765e4b6aca9c91d1bb4fedaed44 [2021-11-19 15:05:11,899 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-19 15:05:11,921 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-19 15:05:11,924 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-19 15:05:11,925 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-19 15:05:11,926 INFO L275 PluginConnector]: CDTParser initialized [2021-11-19 15:05:11,928 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_cisco.ko-entry_point.cil.out.i [2021-11-19 15:05:11,997 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/data/bae5aa4f5/3479b60588fe4240beec5195dd48faaa/FLAG3b23d4269 [2021-11-19 15:05:12,971 INFO L306 CDTParser]: Found 1 translation units. [2021-11-19 15:05:12,972 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_cisco.ko-entry_point.cil.out.i [2021-11-19 15:05:13,018 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/data/bae5aa4f5/3479b60588fe4240beec5195dd48faaa/FLAG3b23d4269 [2021-11-19 15:05:13,379 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/data/bae5aa4f5/3479b60588fe4240beec5195dd48faaa [2021-11-19 15:05:13,382 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-19 15:05:13,383 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-19 15:05:13,385 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-19 15:05:13,385 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-19 15:05:13,389 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-19 15:05:13,390 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 03:05:13" (1/1) ... [2021-11-19 15:05:13,391 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@e438e0d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 03:05:13, skipping insertion in model container [2021-11-19 15:05:13,391 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 03:05:13" (1/1) ... [2021-11-19 15:05:13,414 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-19 15:05:13,524 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-19 15:05:14,485 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_cisco.ko-entry_point.cil.out.i[158033,158046] [2021-11-19 15:05:14,888 INFO L207 PostProcessor]: Analyzing one entry point: main [2021-11-19 15:05:14,917 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2021-11-19 15:05:14,973 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-19 15:05:15,144 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_cisco.ko-entry_point.cil.out.i[158033,158046] [2021-11-19 15:05:15,282 INFO L207 PostProcessor]: Analyzing one entry point: main [2021-11-19 15:05:15,297 INFO L203 MainTranslator]: Completed pre-run [2021-11-19 15:05:15,479 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_cisco.ko-entry_point.cil.out.i[158033,158046] [2021-11-19 15:05:15,594 INFO L207 PostProcessor]: Analyzing one entry point: main [2021-11-19 15:05:15,692 INFO L208 MainTranslator]: Completed translation [2021-11-19 15:05:15,693 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 03:05:15 WrapperNode [2021-11-19 15:05:15,693 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-19 15:05:15,695 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-19 15:05:15,695 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-19 15:05:15,695 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-19 15:05:15,703 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 03:05:15" (1/1) ... [2021-11-19 15:05:15,757 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 03:05:15" (1/1) ... [2021-11-19 15:05:15,849 INFO L137 Inliner]: procedures = 158, calls = 357, calls flagged for inlining = 63, calls inlined = 60, statements flattened = 1387 [2021-11-19 15:05:15,849 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-19 15:05:15,850 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-19 15:05:15,850 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-19 15:05:15,850 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-19 15:05:15,862 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 03:05:15" (1/1) ... [2021-11-19 15:05:15,863 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 03:05:15" (1/1) ... [2021-11-19 15:05:15,892 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 03:05:15" (1/1) ... [2021-11-19 15:05:15,892 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 03:05:15" (1/1) ... [2021-11-19 15:05:15,984 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 03:05:15" (1/1) ... [2021-11-19 15:05:15,996 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 03:05:15" (1/1) ... [2021-11-19 15:05:16,022 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 03:05:15" (1/1) ... [2021-11-19 15:05:16,048 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-19 15:05:16,049 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-19 15:05:16,049 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-19 15:05:16,049 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-19 15:05:16,050 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 03:05:15" (1/1) ... [2021-11-19 15:05:16,057 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-19 15:05:16,074 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/z3 [2021-11-19 15:05:16,087 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-19 15:05:16,123 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-19 15:05:16,166 INFO L130 BoogieDeclarations]: Found specification of procedure __fswab32 [2021-11-19 15:05:16,166 INFO L138 BoogieDeclarations]: Found implementation of procedure __fswab32 [2021-11-19 15:05:16,166 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2021-11-19 15:05:16,166 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2021-11-19 15:05:16,166 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2021-11-19 15:05:16,167 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-11-19 15:05:16,167 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2021-11-19 15:05:16,168 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-11-19 15:05:16,168 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-11-19 15:05:16,168 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-11-19 15:05:16,168 INFO L130 BoogieDeclarations]: Found specification of procedure state [2021-11-19 15:05:16,168 INFO L138 BoogieDeclarations]: Found implementation of procedure state [2021-11-19 15:05:16,169 INFO L130 BoogieDeclarations]: Found specification of procedure dev_to_hdlc [2021-11-19 15:05:16,169 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_to_hdlc [2021-11-19 15:05:16,169 INFO L130 BoogieDeclarations]: Found specification of procedure cisco_ioctl [2021-11-19 15:05:16,169 INFO L138 BoogieDeclarations]: Found implementation of procedure cisco_ioctl [2021-11-19 15:05:16,169 INFO L130 BoogieDeclarations]: Found specification of procedure cisco_rx [2021-11-19 15:05:16,169 INFO L138 BoogieDeclarations]: Found implementation of procedure cisco_rx [2021-11-19 15:05:16,170 INFO L130 BoogieDeclarations]: Found specification of procedure debug_lockdep_rcu_enabled [2021-11-19 15:05:16,170 INFO L138 BoogieDeclarations]: Found implementation of procedure debug_lockdep_rcu_enabled [2021-11-19 15:05:16,170 INFO L130 BoogieDeclarations]: Found specification of procedure cisco_type_trans [2021-11-19 15:05:16,170 INFO L138 BoogieDeclarations]: Found implementation of procedure cisco_type_trans [2021-11-19 15:05:16,170 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-11-19 15:05:16,171 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-11-19 15:05:16,171 INFO L130 BoogieDeclarations]: Found specification of procedure netif_dormant_on [2021-11-19 15:05:16,171 INFO L138 BoogieDeclarations]: Found implementation of procedure netif_dormant_on [2021-11-19 15:05:16,171 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_is_watching [2021-11-19 15:05:16,171 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_is_watching [2021-11-19 15:05:16,171 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2021-11-19 15:05:16,172 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2021-11-19 15:05:16,172 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-11-19 15:05:16,172 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-11-19 15:05:16,172 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2021-11-19 15:05:16,172 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2021-11-19 15:05:16,173 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2021-11-19 15:05:16,173 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2021-11-19 15:05:16,173 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-11-19 15:05:16,174 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-11-19 15:05:16,174 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-11-19 15:05:16,174 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-11-19 15:05:16,174 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-19 15:05:16,174 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2021-11-19 15:05:16,174 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2021-11-19 15:05:16,175 INFO L130 BoogieDeclarations]: Found specification of procedure cisco_hard_header [2021-11-19 15:05:16,175 INFO L138 BoogieDeclarations]: Found implementation of procedure cisco_hard_header [2021-11-19 15:05:16,175 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2021-11-19 15:05:16,176 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2021-11-19 15:05:16,176 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-19 15:05:16,176 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-19 15:05:16,176 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-19 15:05:16,177 INFO L130 BoogieDeclarations]: Found specification of procedure lockdep_rcu_suspicious [2021-11-19 15:05:16,178 INFO L138 BoogieDeclarations]: Found implementation of procedure lockdep_rcu_suspicious [2021-11-19 15:05:16,178 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_percpu_size [2021-11-19 15:05:16,179 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2021-11-19 15:05:16,180 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2021-11-19 15:05:16,180 INFO L130 BoogieDeclarations]: Found specification of procedure reg_timer_1 [2021-11-19 15:05:16,180 INFO L138 BoogieDeclarations]: Found implementation of procedure reg_timer_1 [2021-11-19 15:05:16,180 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2021-11-19 15:05:16,181 INFO L130 BoogieDeclarations]: Found specification of procedure _copy_to_user [2021-11-19 15:05:16,181 INFO L138 BoogieDeclarations]: Found implementation of procedure _copy_to_user [2021-11-19 15:05:16,181 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-19 15:05:16,182 INFO L130 BoogieDeclarations]: Found specification of procedure add_timer [2021-11-19 15:05:16,182 INFO L138 BoogieDeclarations]: Found implementation of procedure add_timer [2021-11-19 15:05:16,182 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2021-11-19 15:05:16,183 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2021-11-19 15:05:16,183 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2021-11-19 15:05:16,183 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2021-11-19 15:05:16,183 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2021-11-19 15:05:16,184 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-19 15:05:16,184 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2021-11-19 15:05:16,185 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-19 15:05:16,185 INFO L130 BoogieDeclarations]: Found specification of procedure might_fault [2021-11-19 15:05:16,185 INFO L138 BoogieDeclarations]: Found implementation of procedure might_fault [2021-11-19 15:05:16,185 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2021-11-19 15:05:16,185 INFO L130 BoogieDeclarations]: Found specification of procedure cisco_keepalive_send [2021-11-19 15:05:16,186 INFO L138 BoogieDeclarations]: Found implementation of procedure cisco_keepalive_send [2021-11-19 15:05:16,186 INFO L130 BoogieDeclarations]: Found specification of procedure __fswab16 [2021-11-19 15:05:16,186 INFO L138 BoogieDeclarations]: Found implementation of procedure __fswab16 [2021-11-19 15:05:16,186 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2021-11-19 15:05:16,186 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2021-11-19 15:05:16,187 INFO L130 BoogieDeclarations]: Found specification of procedure spin_lock [2021-11-19 15:05:16,187 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_lock [2021-11-19 15:05:16,187 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock [2021-11-19 15:05:16,187 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock [2021-11-19 15:05:16,188 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2021-11-19 15:05:16,188 INFO L130 BoogieDeclarations]: Found specification of procedure linkwatch_fire_event [2021-11-19 15:05:16,188 INFO L138 BoogieDeclarations]: Found implementation of procedure linkwatch_fire_event [2021-11-19 15:05:16,189 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-11-19 15:05:16,189 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-11-19 15:05:16,189 INFO L130 BoogieDeclarations]: Found specification of procedure _copy_from_user [2021-11-19 15:05:16,190 INFO L138 BoogieDeclarations]: Found implementation of procedure _copy_from_user [2021-11-19 15:05:16,190 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-19 15:05:16,191 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-19 15:05:16,767 INFO L236 CfgBuilder]: Building ICFG [2021-11-19 15:05:16,772 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-19 15:05:16,853 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-11-19 15:05:26,130 INFO L277 CfgBuilder]: Performing block encoding [2021-11-19 15:05:26,146 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-19 15:05:26,146 INFO L301 CfgBuilder]: Removed 1 assume(true) statements. [2021-11-19 15:05:26,149 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 03:05:26 BoogieIcfgContainer [2021-11-19 15:05:26,150 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-19 15:05:26,152 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-19 15:05:26,152 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-19 15:05:26,155 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-19 15:05:26,156 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 19.11 03:05:13" (1/3) ... [2021-11-19 15:05:26,156 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@573b0a5f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 03:05:26, skipping insertion in model container [2021-11-19 15:05:26,156 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 03:05:15" (2/3) ... [2021-11-19 15:05:26,157 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@573b0a5f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 03:05:26, skipping insertion in model container [2021-11-19 15:05:26,157 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 03:05:26" (3/3) ... [2021-11-19 15:05:26,158 INFO L111 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_cisco.ko-entry_point.cil.out.i [2021-11-19 15:05:26,164 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-19 15:05:26,164 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-19 15:05:26,237 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-19 15:05:26,254 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-19 15:05:26,254 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-19 15:05:26,300 INFO L276 IsEmpty]: Start isEmpty. Operand has 488 states, 358 states have (on average 1.3715083798882681) internal successors, (491), 371 states have internal predecessors, (491), 97 states have call successors, (97), 32 states have call predecessors, (97), 31 states have return successors, (93), 93 states have call predecessors, (93), 93 states have call successors, (93) [2021-11-19 15:05:26,310 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2021-11-19 15:05:26,310 INFO L506 BasicCegarLoop]: Found error trace [2021-11-19 15:05:26,311 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-19 15:05:26,311 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-19 15:05:26,316 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-19 15:05:26,316 INFO L85 PathProgramCache]: Analyzing trace with hash -796223239, now seen corresponding path program 1 times [2021-11-19 15:05:26,329 INFO L121 FreeRefinementEngine]: Executing refinement strategy WALRUS [2021-11-19 15:05:26,329 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1778904608] [2021-11-19 15:05:26,330 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-19 15:05:26,331 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-19 15:05:26,331 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/mathsat [2021-11-19 15:05:26,334 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-19 15:05:26,349 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2021-11-19 15:05:26,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-19 15:05:26,713 INFO L263 TraceCheckSpWp]: Trace formula consists of 242 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-19 15:05:26,720 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-19 15:05:26,990 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2021-11-19 15:05:26,990 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-19 15:05:27,186 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2021-11-19 15:05:27,187 INFO L139 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2021-11-19 15:05:27,187 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1778904608] [2021-11-19 15:05:27,188 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1778904608] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-19 15:05:27,188 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-19 15:05:27,188 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2021-11-19 15:05:27,190 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1388110526] [2021-11-19 15:05:27,191 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-19 15:05:27,195 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-19 15:05:27,196 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2021-11-19 15:05:27,224 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-19 15:05:27,225 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-19 15:05:27,229 INFO L87 Difference]: Start difference. First operand has 488 states, 358 states have (on average 1.3715083798882681) internal successors, (491), 371 states have internal predecessors, (491), 97 states have call successors, (97), 32 states have call predecessors, (97), 31 states have return successors, (93), 93 states have call predecessors, (93), 93 states have call successors, (93) Second operand has 4 states, 4 states have (on average 7.75) internal successors, (31), 4 states have internal predecessors, (31), 2 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2021-11-19 15:05:29,046 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-19 15:05:29,046 INFO L93 Difference]: Finished difference Result 1874 states and 2678 transitions. [2021-11-19 15:05:29,049 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-19 15:05:29,051 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 7.75) internal successors, (31), 4 states have internal predecessors, (31), 2 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) Word has length 47 [2021-11-19 15:05:29,051 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-19 15:05:29,099 INFO L225 Difference]: With dead ends: 1874 [2021-11-19 15:05:29,099 INFO L226 Difference]: Without dead ends: 1370 [2021-11-19 15:05:29,118 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 92 GetRequests, 90 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-19 15:05:29,127 INFO L933 BasicCegarLoop]: 852 mSDtfsCounter, 1723 mSDsluCounter, 1102 mSDsCounter, 0 mSdLazyCounter, 203 mSolverCounterSat, 182 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1723 SdHoareTripleChecker+Valid, 1954 SdHoareTripleChecker+Invalid, 385 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 182 IncrementalHoareTripleChecker+Valid, 203 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2021-11-19 15:05:29,128 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1723 Valid, 1954 Invalid, 385 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [182 Valid, 203 Invalid, 0 Unknown, 0 Unchecked, 1.5s Time] [2021-11-19 15:05:29,155 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1370 states. [2021-11-19 15:05:29,312 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1370 to 1370. [2021-11-19 15:05:29,317 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1370 states, 1016 states have (on average 1.359251968503937) internal successors, (1381), 1037 states have internal predecessors, (1381), 263 states have call successors, (263), 91 states have call predecessors, (263), 90 states have return successors, (262), 262 states have call predecessors, (262), 262 states have call successors, (262) [2021-11-19 15:05:29,331 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1370 states to 1370 states and 1906 transitions. [2021-11-19 15:05:29,333 INFO L78 Accepts]: Start accepts. Automaton has 1370 states and 1906 transitions. Word has length 47 [2021-11-19 15:05:29,334 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-19 15:05:29,334 INFO L470 AbstractCegarLoop]: Abstraction has 1370 states and 1906 transitions. [2021-11-19 15:05:29,334 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 7.75) internal successors, (31), 4 states have internal predecessors, (31), 2 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2021-11-19 15:05:29,335 INFO L276 IsEmpty]: Start isEmpty. Operand 1370 states and 1906 transitions. [2021-11-19 15:05:29,339 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2021-11-19 15:05:29,339 INFO L506 BasicCegarLoop]: Found error trace [2021-11-19 15:05:29,339 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-19 15:05:29,360 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/mathsat -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2021-11-19 15:05:29,556 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/mathsat -unsat_core_generation=3 [2021-11-19 15:05:29,557 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-19 15:05:29,560 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-19 15:05:29,560 INFO L85 PathProgramCache]: Analyzing trace with hash 566714884, now seen corresponding path program 1 times [2021-11-19 15:05:29,561 INFO L121 FreeRefinementEngine]: Executing refinement strategy WALRUS [2021-11-19 15:05:29,561 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1321491467] [2021-11-19 15:05:29,561 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-19 15:05:29,561 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-19 15:05:29,562 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/mathsat [2021-11-19 15:05:29,563 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-19 15:05:29,601 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2021-11-19 15:05:29,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-19 15:05:29,883 INFO L263 TraceCheckSpWp]: Trace formula consists of 246 conjuncts, 3 conjunts are in the unsatisfiable core [2021-11-19 15:05:29,887 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-19 15:05:30,078 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2021-11-19 15:05:30,078 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-19 15:05:30,193 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2021-11-19 15:05:30,195 INFO L139 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2021-11-19 15:05:30,196 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1321491467] [2021-11-19 15:05:30,198 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1321491467] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-19 15:05:30,198 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-19 15:05:30,198 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4, 4] imperfect sequences [] total 4 [2021-11-19 15:05:30,199 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [866437595] [2021-11-19 15:05:30,199 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-19 15:05:30,200 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-19 15:05:30,200 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2021-11-19 15:05:30,201 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-19 15:05:30,201 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-19 15:05:30,201 INFO L87 Difference]: Start difference. First operand 1370 states and 1906 transitions. Second operand has 4 states, 4 states have (on average 6.75) internal successors, (27), 4 states have internal predecessors, (27), 2 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2021-11-19 15:05:30,583 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-19 15:05:30,583 INFO L93 Difference]: Finished difference Result 2725 states and 3791 transitions. [2021-11-19 15:05:30,584 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-19 15:05:30,584 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 6.75) internal successors, (27), 4 states have internal predecessors, (27), 2 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) Word has length 50 [2021-11-19 15:05:30,585 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-19 15:05:30,601 INFO L225 Difference]: With dead ends: 2725 [2021-11-19 15:05:30,602 INFO L226 Difference]: Without dead ends: 1369 [2021-11-19 15:05:30,611 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 100 GetRequests, 97 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-11-19 15:05:30,613 INFO L933 BasicCegarLoop]: 782 mSDtfsCounter, 794 mSDsluCounter, 671 mSDsCounter, 0 mSdLazyCounter, 36 mSolverCounterSat, 37 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 794 SdHoareTripleChecker+Valid, 1453 SdHoareTripleChecker+Invalid, 73 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 37 IncrementalHoareTripleChecker+Valid, 36 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-19 15:05:30,620 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [794 Valid, 1453 Invalid, 73 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [37 Valid, 36 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-19 15:05:30,624 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1369 states. [2021-11-19 15:05:30,740 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1369 to 1369. [2021-11-19 15:05:30,744 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1369 states, 1015 states have (on average 1.3566502463054186) internal successors, (1377), 1036 states have internal predecessors, (1377), 263 states have call successors, (263), 91 states have call predecessors, (263), 90 states have return successors, (262), 262 states have call predecessors, (262), 262 states have call successors, (262) [2021-11-19 15:05:30,756 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1369 states to 1369 states and 1902 transitions. [2021-11-19 15:05:30,758 INFO L78 Accepts]: Start accepts. Automaton has 1369 states and 1902 transitions. Word has length 50 [2021-11-19 15:05:30,759 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-19 15:05:30,759 INFO L470 AbstractCegarLoop]: Abstraction has 1369 states and 1902 transitions. [2021-11-19 15:05:30,759 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 6.75) internal successors, (27), 4 states have internal predecessors, (27), 2 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2021-11-19 15:05:30,760 INFO L276 IsEmpty]: Start isEmpty. Operand 1369 states and 1902 transitions. [2021-11-19 15:05:30,771 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2021-11-19 15:05:30,771 INFO L506 BasicCegarLoop]: Found error trace [2021-11-19 15:05:30,772 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-19 15:05:30,802 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/mathsat -unsat_core_generation=3 (3)] Ended with exit code 0 [2021-11-19 15:05:30,979 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/mathsat -unsat_core_generation=3 [2021-11-19 15:05:30,979 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-19 15:05:30,980 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-19 15:05:30,980 INFO L85 PathProgramCache]: Analyzing trace with hash -965053755, now seen corresponding path program 1 times [2021-11-19 15:05:30,981 INFO L121 FreeRefinementEngine]: Executing refinement strategy WALRUS [2021-11-19 15:05:30,981 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1419962829] [2021-11-19 15:05:30,981 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-19 15:05:30,981 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-19 15:05:30,981 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/mathsat [2021-11-19 15:05:30,982 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-19 15:05:30,983 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2021-11-19 15:05:31,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-19 15:05:31,316 INFO L263 TraceCheckSpWp]: Trace formula consists of 304 conjuncts, 4 conjunts are in the unsatisfiable core [2021-11-19 15:05:31,320 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-19 15:05:31,636 INFO L134 CoverageAnalysis]: Checked inductivity of 89 backedges. 40 proven. 0 refuted. 0 times theorem prover too weak. 49 trivial. 0 not checked. [2021-11-19 15:05:31,636 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-19 15:05:31,923 INFO L134 CoverageAnalysis]: Checked inductivity of 89 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 89 trivial. 0 not checked. [2021-11-19 15:05:31,923 INFO L139 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2021-11-19 15:05:31,923 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1419962829] [2021-11-19 15:05:31,924 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1419962829] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-19 15:05:31,924 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-19 15:05:31,924 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 7 [2021-11-19 15:05:31,924 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1139360778] [2021-11-19 15:05:31,924 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-19 15:05:31,925 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-19 15:05:31,925 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2021-11-19 15:05:31,925 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-19 15:05:31,926 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-11-19 15:05:31,926 INFO L87 Difference]: Start difference. First operand 1369 states and 1902 transitions. Second operand has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 7 states have internal predecessors, (40), 3 states have call successors, (10), 3 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-19 15:05:32,278 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-19 15:05:32,278 INFO L93 Difference]: Finished difference Result 4076 states and 5696 transitions. [2021-11-19 15:05:32,279 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-19 15:05:32,279 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 7 states have internal predecessors, (40), 3 states have call successors, (10), 3 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 71 [2021-11-19 15:05:32,280 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-19 15:05:32,302 INFO L225 Difference]: With dead ends: 4076 [2021-11-19 15:05:32,303 INFO L226 Difference]: Without dead ends: 2716 [2021-11-19 15:05:32,310 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 142 GetRequests, 135 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=26, Invalid=46, Unknown=0, NotChecked=0, Total=72 [2021-11-19 15:05:32,311 INFO L933 BasicCegarLoop]: 752 mSDtfsCounter, 627 mSDsluCounter, 2896 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 627 SdHoareTripleChecker+Valid, 3648 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-19 15:05:32,312 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [627 Valid, 3648 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-19 15:05:32,318 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2716 states. [2021-11-19 15:05:32,480 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2716 to 2716. [2021-11-19 15:05:32,487 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2716 states, 2015 states have (on average 1.3573200992555832) internal successors, (2735), 2057 states have internal predecessors, (2735), 520 states have call successors, (520), 181 states have call predecessors, (520), 180 states have return successors, (534), 519 states have call predecessors, (534), 519 states have call successors, (534) [2021-11-19 15:05:32,538 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2716 states to 2716 states and 3789 transitions. [2021-11-19 15:05:32,539 INFO L78 Accepts]: Start accepts. Automaton has 2716 states and 3789 transitions. Word has length 71 [2021-11-19 15:05:32,540 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-19 15:05:32,540 INFO L470 AbstractCegarLoop]: Abstraction has 2716 states and 3789 transitions. [2021-11-19 15:05:32,540 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 7 states have internal predecessors, (40), 3 states have call successors, (10), 3 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-19 15:05:32,540 INFO L276 IsEmpty]: Start isEmpty. Operand 2716 states and 3789 transitions. [2021-11-19 15:05:32,551 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 142 [2021-11-19 15:05:32,551 INFO L506 BasicCegarLoop]: Found error trace [2021-11-19 15:05:32,552 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 8, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-19 15:05:32,570 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/mathsat -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2021-11-19 15:05:32,771 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/mathsat -unsat_core_generation=3 [2021-11-19 15:05:32,771 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-19 15:05:32,772 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-19 15:05:32,772 INFO L85 PathProgramCache]: Analyzing trace with hash -574025911, now seen corresponding path program 1 times [2021-11-19 15:05:32,773 INFO L121 FreeRefinementEngine]: Executing refinement strategy WALRUS [2021-11-19 15:05:32,773 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [287179157] [2021-11-19 15:05:32,774 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-19 15:05:32,774 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-19 15:05:32,774 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/mathsat [2021-11-19 15:05:32,775 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-19 15:05:32,812 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2021-11-19 15:05:33,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-19 15:05:33,304 INFO L263 TraceCheckSpWp]: Trace formula consists of 530 conjuncts, 9 conjunts are in the unsatisfiable core [2021-11-19 15:05:33,311 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-19 15:05:33,735 INFO L134 CoverageAnalysis]: Checked inductivity of 125 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 104 trivial. 0 not checked. [2021-11-19 15:05:33,735 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-19 15:05:34,360 INFO L134 CoverageAnalysis]: Checked inductivity of 125 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 104 trivial. 0 not checked. [2021-11-19 15:05:34,361 INFO L139 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2021-11-19 15:05:34,361 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [287179157] [2021-11-19 15:05:34,361 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [287179157] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-19 15:05:34,361 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-19 15:05:34,361 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 5 [2021-11-19 15:05:34,362 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [280284111] [2021-11-19 15:05:34,362 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-19 15:05:34,363 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-19 15:05:34,363 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2021-11-19 15:05:34,363 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-19 15:05:34,364 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-19 15:05:34,364 INFO L87 Difference]: Start difference. First operand 2716 states and 3789 transitions. Second operand has 5 states, 5 states have (on average 17.6) internal successors, (88), 4 states have internal predecessors, (88), 2 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 2 states have call successors, (19) [2021-11-19 15:05:34,578 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-19 15:05:34,579 INFO L93 Difference]: Finished difference Result 5454 states and 7655 transitions. [2021-11-19 15:05:34,579 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-19 15:05:34,579 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 17.6) internal successors, (88), 4 states have internal predecessors, (88), 2 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 2 states have call successors, (19) Word has length 141 [2021-11-19 15:05:34,580 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-19 15:05:34,602 INFO L225 Difference]: With dead ends: 5454 [2021-11-19 15:05:34,602 INFO L226 Difference]: Without dead ends: 2752 [2021-11-19 15:05:34,616 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 280 GetRequests, 277 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-19 15:05:34,617 INFO L933 BasicCegarLoop]: 658 mSDtfsCounter, 2 mSDsluCounter, 1969 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 2627 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-19 15:05:34,617 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2 Valid, 2627 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-19 15:05:34,622 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2752 states. [2021-11-19 15:05:34,794 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2752 to 2746. [2021-11-19 15:05:34,801 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2746 states, 2036 states have (on average 1.3536345776031433) internal successors, (2756), 2081 states have internal predecessors, (2756), 520 states have call successors, (520), 181 states have call predecessors, (520), 189 states have return successors, (552), 525 states have call predecessors, (552), 519 states have call successors, (552) [2021-11-19 15:05:34,821 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2746 states to 2746 states and 3828 transitions. [2021-11-19 15:05:34,822 INFO L78 Accepts]: Start accepts. Automaton has 2746 states and 3828 transitions. Word has length 141 [2021-11-19 15:05:34,823 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-19 15:05:34,823 INFO L470 AbstractCegarLoop]: Abstraction has 2746 states and 3828 transitions. [2021-11-19 15:05:34,823 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 17.6) internal successors, (88), 4 states have internal predecessors, (88), 2 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 2 states have call successors, (19) [2021-11-19 15:05:34,824 INFO L276 IsEmpty]: Start isEmpty. Operand 2746 states and 3828 transitions. [2021-11-19 15:05:34,835 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 149 [2021-11-19 15:05:34,835 INFO L506 BasicCegarLoop]: Found error trace [2021-11-19 15:05:34,836 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-19 15:05:34,863 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/mathsat -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2021-11-19 15:05:35,055 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/mathsat -unsat_core_generation=3 [2021-11-19 15:05:35,055 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-19 15:05:35,056 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-19 15:05:35,056 INFO L85 PathProgramCache]: Analyzing trace with hash -1293113785, now seen corresponding path program 1 times [2021-11-19 15:05:35,057 INFO L121 FreeRefinementEngine]: Executing refinement strategy WALRUS [2021-11-19 15:05:35,057 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1750174778] [2021-11-19 15:05:35,057 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-19 15:05:35,058 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-19 15:05:35,058 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/mathsat [2021-11-19 15:05:35,060 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-19 15:05:35,075 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/mathsat -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2021-11-19 15:05:35,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-19 15:05:35,630 INFO L263 TraceCheckSpWp]: Trace formula consists of 553 conjuncts, 25 conjunts are in the unsatisfiable core [2021-11-19 15:05:35,637 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-19 15:05:36,489 INFO L134 CoverageAnalysis]: Checked inductivity of 125 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 104 trivial. 0 not checked. [2021-11-19 15:05:36,489 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-19 15:05:39,077 INFO L134 CoverageAnalysis]: Checked inductivity of 125 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 104 trivial. 0 not checked. [2021-11-19 15:05:39,078 INFO L139 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2021-11-19 15:05:39,078 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1750174778] [2021-11-19 15:05:39,078 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1750174778] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-19 15:05:39,078 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-19 15:05:39,079 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11, 11] imperfect sequences [] total 20 [2021-11-19 15:05:39,079 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [926940564] [2021-11-19 15:05:39,079 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-19 15:05:39,080 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2021-11-19 15:05:39,080 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2021-11-19 15:05:39,080 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2021-11-19 15:05:39,082 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=46, Invalid=334, Unknown=0, NotChecked=0, Total=380 [2021-11-19 15:05:39,082 INFO L87 Difference]: Start difference. First operand 2746 states and 3828 transitions. Second operand has 20 states, 20 states have (on average 5.35) internal successors, (107), 16 states have internal predecessors, (107), 4 states have call successors, (22), 2 states have call predecessors, (22), 6 states have return successors, (23), 8 states have call predecessors, (23), 4 states have call successors, (23) [2021-11-19 15:05:47,006 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-19 15:05:47,006 INFO L93 Difference]: Finished difference Result 5586 states and 7818 transitions. [2021-11-19 15:05:47,007 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-11-19 15:05:47,008 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 20 states have (on average 5.35) internal successors, (107), 16 states have internal predecessors, (107), 4 states have call successors, (22), 2 states have call predecessors, (22), 6 states have return successors, (23), 8 states have call predecessors, (23), 4 states have call successors, (23) Word has length 148 [2021-11-19 15:05:47,008 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-19 15:05:47,032 INFO L225 Difference]: With dead ends: 5586 [2021-11-19 15:05:47,032 INFO L226 Difference]: Without dead ends: 2854 [2021-11-19 15:05:47,046 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 299 GetRequests, 277 SyntacticMatches, 0 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 41 ImplicationChecksByTransitivity, 1.6s TimeCoverageRelationStatistics Valid=73, Invalid=479, Unknown=0, NotChecked=0, Total=552 [2021-11-19 15:05:47,047 INFO L933 BasicCegarLoop]: 671 mSDtfsCounter, 65 mSDsluCounter, 6662 mSDsCounter, 0 mSdLazyCounter, 135 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 7333 SdHoareTripleChecker+Invalid, 150 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 135 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.4s IncrementalHoareTripleChecker+Time [2021-11-19 15:05:47,048 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [68 Valid, 7333 Invalid, 150 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 135 Invalid, 0 Unknown, 0 Unchecked, 7.4s Time] [2021-11-19 15:05:47,053 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2854 states. [2021-11-19 15:05:47,199 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2854 to 2806. [2021-11-19 15:05:47,206 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2806 states, 2081 states have (on average 1.3431042767900048) internal successors, (2795), 2126 states have internal predecessors, (2795), 529 states have call successors, (529), 181 states have call predecessors, (529), 195 states have return successors, (570), 540 states have call predecessors, (570), 528 states have call successors, (570) [2021-11-19 15:05:47,220 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2806 states to 2806 states and 3894 transitions. [2021-11-19 15:05:47,222 INFO L78 Accepts]: Start accepts. Automaton has 2806 states and 3894 transitions. Word has length 148 [2021-11-19 15:05:47,224 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-19 15:05:47,224 INFO L470 AbstractCegarLoop]: Abstraction has 2806 states and 3894 transitions. [2021-11-19 15:05:47,225 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 20 states have (on average 5.35) internal successors, (107), 16 states have internal predecessors, (107), 4 states have call successors, (22), 2 states have call predecessors, (22), 6 states have return successors, (23), 8 states have call predecessors, (23), 4 states have call successors, (23) [2021-11-19 15:05:47,225 INFO L276 IsEmpty]: Start isEmpty. Operand 2806 states and 3894 transitions. [2021-11-19 15:05:47,260 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 184 [2021-11-19 15:05:47,260 INFO L506 BasicCegarLoop]: Found error trace [2021-11-19 15:05:47,261 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 4, 4, 4, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-19 15:05:47,297 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/mathsat -unsat_core_generation=3 (6)] Forceful destruction successful, exit code 0 [2021-11-19 15:05:47,472 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/mathsat -unsat_core_generation=3 [2021-11-19 15:05:47,473 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-19 15:05:47,473 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-19 15:05:47,474 INFO L85 PathProgramCache]: Analyzing trace with hash -669328497, now seen corresponding path program 1 times [2021-11-19 15:05:47,475 INFO L121 FreeRefinementEngine]: Executing refinement strategy WALRUS [2021-11-19 15:05:47,475 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [524530181] [2021-11-19 15:05:47,475 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-19 15:05:47,475 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-19 15:05:47,476 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/mathsat [2021-11-19 15:05:47,478 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-19 15:05:47,523 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/mathsat -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2021-11-19 15:05:51,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-19 15:05:51,809 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-19 15:06:00,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-19 15:06:00,850 INFO L133 FreeRefinementEngine]: Strategy WALRUS found a feasible trace [2021-11-19 15:06:00,850 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-11-19 15:06:00,851 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-19 15:06:00,912 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/mathsat -unsat_core_generation=3 (7)] Forceful destruction successful, exit code 0 [2021-11-19 15:06:01,075 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/mathsat -unsat_core_generation=3 [2021-11-19 15:06:01,078 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1] [2021-11-19 15:06:01,080 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-19 15:06:01,137 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 15:06:01,138 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 15:06:01,138 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 15:06:01,139 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 15:06:01,139 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 15:06:01,140 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 15:06:01,140 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 15:06:01,140 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 15:06:01,140 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 15:06:01,141 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 15:06:01,383 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 19.11 03:06:01 BoogieIcfgContainer [2021-11-19 15:06:01,383 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-19 15:06:01,383 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-19 15:06:01,384 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-19 15:06:01,384 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-19 15:06:01,384 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 03:05:26" (3/4) ... [2021-11-19 15:06:01,386 INFO L131 WitnessPrinter]: Generating witness for reachability counterexample [2021-11-19 15:06:01,405 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 15:06:01,406 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 15:06:01,406 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 15:06:01,406 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 15:06:01,407 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 15:06:01,407 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 15:06:01,407 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 15:06:01,407 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 15:06:01,408 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 15:06:01,408 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 15:06:01,616 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/witness.graphml [2021-11-19 15:06:01,617 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-19 15:06:01,617 INFO L158 Benchmark]: Toolchain (without parser) took 48233.84ms. Allocated memory was 79.7MB in the beginning and 226.5MB in the end (delta: 146.8MB). Free memory was 56.8MB in the beginning and 65.5MB in the end (delta: -8.6MB). Peak memory consumption was 139.0MB. Max. memory is 16.1GB. [2021-11-19 15:06:01,618 INFO L158 Benchmark]: CDTParser took 0.32ms. Allocated memory is still 79.7MB. Free memory is still 61.0MB. There was no memory consumed. Max. memory is 16.1GB. [2021-11-19 15:06:01,618 INFO L158 Benchmark]: CACSL2BoogieTranslator took 2308.74ms. Allocated memory was 79.7MB in the beginning and 109.1MB in the end (delta: 29.4MB). Free memory was 56.6MB in the beginning and 55.1MB in the end (delta: 1.4MB). Peak memory consumption was 61.3MB. Max. memory is 16.1GB. [2021-11-19 15:06:01,618 INFO L158 Benchmark]: Boogie Procedure Inliner took 154.68ms. Allocated memory is still 109.1MB. Free memory was 54.6MB in the beginning and 46.7MB in the end (delta: 7.9MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-11-19 15:06:01,619 INFO L158 Benchmark]: Boogie Preprocessor took 197.93ms. Allocated memory is still 109.1MB. Free memory was 46.7MB in the beginning and 37.8MB in the end (delta: 8.9MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-11-19 15:06:01,619 INFO L158 Benchmark]: RCFGBuilder took 10101.23ms. Allocated memory was 109.1MB in the beginning and 153.1MB in the end (delta: 44.0MB). Free memory was 37.8MB in the beginning and 76.7MB in the end (delta: -38.9MB). Peak memory consumption was 29.3MB. Max. memory is 16.1GB. [2021-11-19 15:06:01,620 INFO L158 Benchmark]: TraceAbstraction took 35231.40ms. Allocated memory was 153.1MB in the beginning and 226.5MB in the end (delta: 73.4MB). Free memory was 75.9MB in the beginning and 108.4MB in the end (delta: -32.6MB). Peak memory consumption was 107.4MB. Max. memory is 16.1GB. [2021-11-19 15:06:01,620 INFO L158 Benchmark]: Witness Printer took 233.19ms. Allocated memory is still 226.5MB. Free memory was 108.4MB in the beginning and 65.5MB in the end (delta: 43.0MB). Peak memory consumption was 44.0MB. Max. memory is 16.1GB. [2021-11-19 15:06:01,623 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.32ms. Allocated memory is still 79.7MB. Free memory is still 61.0MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 2308.74ms. Allocated memory was 79.7MB in the beginning and 109.1MB in the end (delta: 29.4MB). Free memory was 56.6MB in the beginning and 55.1MB in the end (delta: 1.4MB). Peak memory consumption was 61.3MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 154.68ms. Allocated memory is still 109.1MB. Free memory was 54.6MB in the beginning and 46.7MB in the end (delta: 7.9MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Preprocessor took 197.93ms. Allocated memory is still 109.1MB. Free memory was 46.7MB in the beginning and 37.8MB in the end (delta: 8.9MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * RCFGBuilder took 10101.23ms. Allocated memory was 109.1MB in the beginning and 153.1MB in the end (delta: 44.0MB). Free memory was 37.8MB in the beginning and 76.7MB in the end (delta: -38.9MB). Peak memory consumption was 29.3MB. Max. memory is 16.1GB. * TraceAbstraction took 35231.40ms. Allocated memory was 153.1MB in the beginning and 226.5MB in the end (delta: 73.4MB). Free memory was 75.9MB in the beginning and 108.4MB in the end (delta: -32.6MB). Peak memory consumption was 107.4MB. Max. memory is 16.1GB. * Witness Printer took 233.19ms. Allocated memory is still 226.5MB. Free memory was 108.4MB in the beginning and 65.5MB in the end (delta: 43.0MB). Peak memory consumption was 44.0MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - CounterExampleResult [Line: 5554]: a call to reach_error is reachable a call to reach_error is reachable We found a FailurePath: [L5577] int LDV_IN_INTERRUPT = 1; [L5578] struct sk_buff *proto_group1 ; [L5579] int ldv_state_variable_0 ; [L5580] int ldv_state_variable_3 ; [L5581] int ldv_timer_state_1 = 0; [L5582] int ldv_state_variable_2 ; [L5583] struct net_device *proto_group0 ; [L5584] int ref_cnt ; [L5585] int ldv_state_variable_1 ; [L5586] struct timer_list *ldv_timer_list_1 ; [L5964-L5966] static struct hdlc_proto proto = {0, 0, & cisco_start, & cisco_stop, 0, & cisco_ioctl, & cisco_type_trans, & cisco_rx, 0, & __this_module, 0}; [L5967] static struct header_ops const cisco_header_ops = {& cisco_hard_header, 0, 0, 0, 0}; [L6078] int ldv_retval_0 ; [L6374] Element set_impl[15] ; [L6375] int last_index = 0; [L6509] Set LDV_SKBS ; VAL [__this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L6142] struct ifreq *ldvarg0 ; [L6143] void *tmp ; [L6144] unsigned int ldvarg1 ; [L6145] unsigned int tmp___0 ; [L6146] unsigned short ldvarg4 ; [L6147] unsigned short tmp___1 ; [L6148] struct sk_buff *ldvarg3 ; [L6149] void *tmp___2 ; [L6150] struct net_device *ldvarg5 ; [L6151] void *tmp___3 ; [L6152] void *ldvarg2 ; [L6153] void *tmp___4 ; [L6154] void *ldvarg6 ; [L6155] void *tmp___5 ; [L6156] int tmp___6 ; [L6157] int tmp___7 ; [L6158] int tmp___8 ; [L6159] int tmp___9 ; VAL [__this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L6161] CALL, EXPR ldv_zalloc(40UL) VAL [__this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L5519] void *p ; [L5520] void *tmp ; [L5521] int tmp___0 ; [L5523] tmp___0 = __VERIFIER_nondet_int() [L5524] COND TRUE tmp___0 != 0 [L5525] return ((void *)0); VAL [\old(size)=40, \result={0:0}, __this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, size=40, tmp___0=2147483648] [L6161] RET, EXPR ldv_zalloc(40UL) VAL [__this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(40UL)={0:0}, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L6161] tmp = ldv_zalloc(40UL) [L6162] ldvarg0 = (struct ifreq *)tmp [L6163] tmp___0 = __VERIFIER_nondet_uint() [L6164] ldvarg1 = tmp___0 [L6165] tmp___1 = __VERIFIER_nondet_ushort() [L6166] ldvarg4 = tmp___1 VAL [__this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=5, ldvarg4=5, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, tmp={0:0}, tmp___0=5, tmp___1=5] [L6167] CALL, EXPR ldv_zalloc(232UL) VAL [__this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L5519] void *p ; [L5520] void *tmp ; [L5521] int tmp___0 ; [L5523] tmp___0 = __VERIFIER_nondet_int() [L5524] COND TRUE tmp___0 != 0 [L5525] return ((void *)0); VAL [\old(size)=232, \result={0:0}, __this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, size=232, tmp___0=2147483648] [L6167] RET, EXPR ldv_zalloc(232UL) VAL [__this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(232UL)={0:0}, ldvarg0={0:0}, ldvarg1=5, ldvarg4=5, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, tmp={0:0}, tmp___0=5, tmp___1=5] [L6167] tmp___2 = ldv_zalloc(232UL) [L6168] ldvarg3 = (struct sk_buff *)tmp___2 VAL [__this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=5, ldvarg3={0:0}, ldvarg4=5, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, tmp={0:0}, tmp___0=5, tmp___1=5, tmp___2={0:0}] [L6169] CALL, EXPR ldv_zalloc(3264UL) VAL [__this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L5519] void *p ; [L5520] void *tmp ; [L5521] int tmp___0 ; [L5523] tmp___0 = __VERIFIER_nondet_int() [L5524] COND TRUE tmp___0 != 0 [L5525] return ((void *)0); VAL [\old(size)=3264, \result={0:0}, __this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, size=3264, tmp___0=2147483648] [L6169] RET, EXPR ldv_zalloc(3264UL) VAL [__this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(3264UL)={0:0}, ldvarg0={0:0}, ldvarg1=5, ldvarg3={0:0}, ldvarg4=5, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, tmp={0:0}, tmp___0=5, tmp___1=5, tmp___2={0:0}] [L6169] tmp___3 = ldv_zalloc(3264UL) [L6170] ldvarg5 = (struct net_device *)tmp___3 VAL [__this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=5, ldvarg3={0:0}, ldvarg4=5, ldvarg5={0:0}, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, tmp={0:0}, tmp___0=5, tmp___1=5, tmp___2={0:0}, tmp___3={0:0}] [L6171] CALL, EXPR ldv_zalloc(1UL) VAL [__this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L5519] void *p ; [L5520] void *tmp ; [L5521] int tmp___0 ; [L5523] tmp___0 = __VERIFIER_nondet_int() [L5524] COND TRUE tmp___0 != 0 [L5525] return ((void *)0); VAL [\old(size)=1, \result={0:0}, __this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, size=1, tmp___0=2147483648] [L6171] RET, EXPR ldv_zalloc(1UL) VAL [__this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=5, ldvarg3={0:0}, ldvarg4=5, ldvarg5={0:0}, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, tmp={0:0}, tmp___0=5, tmp___1=5, tmp___2={0:0}, tmp___3={0:0}] [L6171] tmp___4 = ldv_zalloc(1UL) [L6172] ldvarg2 = tmp___4 VAL [__this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=5, ldvarg5={0:0}, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, tmp={0:0}, tmp___0=5, tmp___1=5, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}] [L6173] CALL, EXPR ldv_zalloc(1UL) VAL [__this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L5519] void *p ; [L5520] void *tmp ; [L5521] int tmp___0 ; [L5523] tmp___0 = __VERIFIER_nondet_int() [L5524] COND TRUE tmp___0 != 0 [L5525] return ((void *)0); VAL [\old(size)=1, \result={0:0}, __this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, size=1, tmp___0=2147483648] [L6173] RET, EXPR ldv_zalloc(1UL) VAL [__this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=5, ldvarg5={0:0}, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, tmp={0:0}, tmp___0=5, tmp___1=5, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}] [L6173] tmp___5 = ldv_zalloc(1UL) [L6174] ldvarg6 = tmp___5 [L6175] CALL ldv_initialize() [L6528] CALL ldv_set_init(LDV_SKBS) [L6380] set = set_impl [L6381] last_index = 0 VAL [__this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set={78:0}, set_impl={78:0}] [L6528] RET ldv_set_init(LDV_SKBS) [L6175] RET ldv_initialize() [L6176] ldv_state_variable_1 = 1 [L6177] ref_cnt = 0 [L6178] ldv_state_variable_0 = 1 [L6179] ldv_state_variable_3 = 0 [L6180] ldv_state_variable_2 = 0 VAL [__this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=5, ldvarg5={0:0}, ldvarg6={0:0}, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, tmp={0:0}, tmp___0=5, tmp___1=5, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}] [L6182] tmp___6 = __VERIFIER_nondet_int() [L6184] case 0: [L6190] case 1: VAL [__this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=5, ldvarg5={0:0}, ldvarg6={0:0}, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, tmp={0:0}, tmp___0=5, tmp___1=5, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1] [L6191] COND TRUE ldv_state_variable_0 != 0 [L6192] tmp___7 = __VERIFIER_nondet_int() [L6194] case 0: [L6202] case 1: VAL [__this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=5, ldvarg5={0:0}, ldvarg6={0:0}, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, tmp={0:0}, tmp___0=5, tmp___1=5, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=1] [L6203] COND TRUE ldv_state_variable_0 == 1 [L6204] CALL, EXPR mod_init() [L6067] FCALL register_hdlc_protocol(& proto) [L6068] return (0); VAL [\result=0, __this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L6204] RET, EXPR mod_init() [L6204] ldv_retval_0 = mod_init() [L6205] COND TRUE ldv_retval_0 == 0 [L6206] ldv_state_variable_0 = 3 [L6207] ldv_state_variable_2 = 1 [L6208] ldv_state_variable_3 = 1 [L6209] CALL ldv_initialize_hdlc_proto_3() [L6101] void *tmp ; [L6102] void *tmp___0 ; VAL [__this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L6104] CALL, EXPR ldv_zalloc(232UL) VAL [__this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L5519] void *p ; [L5520] void *tmp ; [L5521] int tmp___0 ; [L5523] tmp___0 = __VERIFIER_nondet_int() [L5524] COND TRUE tmp___0 != 0 [L5525] return ((void *)0); VAL [\old(size)=232, \result={0:0}, __this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, size=232, tmp___0=2147483648] [L6104] RET, EXPR ldv_zalloc(232UL) VAL [__this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(232UL)={0:0}, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L6104] tmp = ldv_zalloc(232UL) [L6105] proto_group1 = (struct sk_buff *)tmp VAL [__this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, tmp={0:0}] [L6106] CALL, EXPR ldv_zalloc(3264UL) VAL [__this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L5519] void *p ; [L5520] void *tmp ; [L5521] int tmp___0 ; [L5523] tmp___0 = __VERIFIER_nondet_int() [L5524] COND TRUE tmp___0 != 0 [L5525] return ((void *)0); VAL [\old(size)=3264, \result={0:0}, __this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, size=3264, tmp___0=2147483648] [L6106] RET, EXPR ldv_zalloc(3264UL) VAL [__this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(3264UL)={0:0}, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, tmp={0:0}] [L6106] tmp___0 = ldv_zalloc(3264UL) [L6107] proto_group0 = (struct net_device *)tmp___0 VAL [__this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, tmp={0:0}, tmp___0={0:0}] [L6209] RET ldv_initialize_hdlc_proto_3() [L6212] COND FALSE !(ldv_retval_0 != 0) VAL [__this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=5, ldvarg5={0:0}, ldvarg6={0:0}, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, tmp={0:0}, tmp___0=5, tmp___1=5, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=1] [L6182] tmp___6 = __VERIFIER_nondet_int() [L6184] case 0: VAL [__this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=5, ldvarg5={0:0}, ldvarg6={0:0}, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, tmp={0:0}, tmp___0=5, tmp___1=5, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=0, tmp___7=1] [L6185] COND TRUE ldv_state_variable_1 != 0 [L6186] CALL choose_timer_1(ldv_timer_list_1) [L6114] LDV_IN_INTERRUPT = 2 [L6115] EXPR timer->data [L6115] EXPR timer->function [L6115] CALL (*(timer->function))(timer->data) [L5877] struct net_device *dev ; [L5878] hdlc_device *hdlc ; [L5879] struct hdlc_device *tmp ; [L5880] struct cisco_state *st ; [L5881] struct cisco_state *tmp___0 ; [L5882] __u32 tmp___1 ; [L5883] __u32 tmp___2 ; [L5885] dev = (struct net_device *)arg VAL [\old(arg)=17179869184, __this_module={0:0}, arg=17179869184, cisco_header_ops={79:0}, dev={0:17179869184}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L5886] CALL, EXPR dev_to_hdlc(dev) VAL [__this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L5638] void *tmp ; [L5640] CALL, EXPR netdev_priv((struct net_device const *)dev) [L5595] return ((void *)dev + 3264U); VAL [\result={0:17179872448}, __this_module={0:0}, cisco_header_ops={79:0}, dev={0:17179869184}, dev={0:17179869184}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L5640] RET, EXPR netdev_priv((struct net_device const *)dev) [L5640] tmp = netdev_priv((struct net_device const *)dev) [L5641] return ((struct hdlc_device *)tmp); VAL [\result={0:17179872448}, __this_module={0:0}, cisco_header_ops={79:0}, dev={0:17179869184}, dev={0:17179869184}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, tmp={0:17179872448}] [L5886] RET, EXPR dev_to_hdlc(dev) VAL [\old(arg)=17179869184, __this_module={0:0}, arg=17179869184, cisco_header_ops={79:0}, dev={0:17179869184}, dev_to_hdlc(dev)={0:17179872448}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L5886] tmp = dev_to_hdlc(dev) [L5887] hdlc = tmp VAL [\old(arg)=17179869184, __this_module={0:0}, arg=17179869184, cisco_header_ops={79:0}, dev={0:17179869184}, hdlc={0:17179872448}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, tmp={0:17179872448}] [L5888] CALL, EXPR state(hdlc) VAL [__this_module={0:0}, cisco_header_ops={79:0}, hdlc={0:17179872448}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L5670] EXPR hdlc->state [L5670] return ((struct cisco_state *)hdlc->state); [L5888] RET, EXPR state(hdlc) VAL [\old(arg)=17179869184, __this_module={0:0}, arg=17179869184, cisco_header_ops={79:0}, dev={0:17179869184}, hdlc={0:17179872448}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, state(hdlc)={0:144255925564211200}, tmp={0:17179872448}] [L5888] tmp___0 = state(hdlc) [L5889] st = tmp___0 VAL [\old(arg)=17179869184, __this_module={0:0}, arg=17179869184, cisco_header_ops={79:0}, dev={0:17179869184}, hdlc={0:17179872448}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, st={0:144255925564211200}, tmp={0:17179872448}, tmp___0={0:144255925564211200}] [L5890] CALL spin_lock(& st->lock) VAL [__this_module={0:0}, cisco_header_ops={79:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L5263] FCALL _raw_spin_lock(& lock->ldv_6338.rlock) [L5890] RET spin_lock(& st->lock) VAL [\old(arg)=17179869184, __this_module={0:0}, arg=17179869184, cisco_header_ops={79:0}, dev={0:17179869184}, hdlc={0:17179872448}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, st={0:144255925564211200}, tmp={0:17179872448}, tmp___0={0:144255925564211200}] [L5891] EXPR st->up [L5891] st->up != 0 && (long )((st->last_poll + (unsigned long )(st->settings.timeout * 250U)) - (unsigned long )jiffies) < 0L [L5891] EXPR st->last_poll [L5891] EXPR st->settings.timeout [L5891] st->up != 0 && (long )((st->last_poll + (unsigned long )(st->settings.timeout * 250U)) - (unsigned long )jiffies) < 0L VAL [\old(arg)=17179869184, __this_module={0:0}, arg=17179869184, cisco_header_ops={79:0}, dev={0:17179869184}, hdlc={0:17179872448}, jiffies=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, st={0:144255925564211200}, st->last_poll=0, st->settings.timeout=161325, st->up=2, st->up != 0 && (long )((st->last_poll + (unsigned long )(st->settings.timeout * 250U)) - (unsigned long )jiffies) < 0L=0, tmp={0:17179872448}, tmp___0={0:144255925564211200}] [L5891] COND FALSE !(st->up != 0 && (long )((st->last_poll + (unsigned long )(st->settings.timeout * 250U)) - (unsigned long )jiffies) < 0L) [L5897] EXPR st->rxseq VAL [\old(arg)=17179869184, __this_module={0:0}, arg=17179869184, cisco_header_ops={79:0}, dev={0:17179869184}, hdlc={0:17179872448}, jiffies=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, st={0:144255925564211200}, st->rxseq=0, tmp={0:17179872448}, tmp___0={0:144255925564211200}] [L5897] CALL, EXPR __fswab32(st->rxseq) VAL [__this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L5128] __u32 tmp ; [L5130] CALL, EXPR __arch_swab32(val) [L5117] return (val); VAL [\old(val)=0, \result=0, __this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, val=0] [L5130] RET, EXPR __arch_swab32(val) [L5130] tmp = __arch_swab32(val) [L5131] return (tmp); VAL [\old(val)=0, \result=0, __this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, tmp=0, val=0] [L5897] RET, EXPR __fswab32(st->rxseq) VAL [\old(arg)=17179869184, __fswab32(st->rxseq)=0, __this_module={0:0}, arg=17179869184, cisco_header_ops={79:0}, dev={0:17179869184}, hdlc={0:17179872448}, jiffies=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, st={0:144255925564211200}, st->rxseq=0, tmp={0:17179872448}, tmp___0={0:144255925564211200}] [L5897] tmp___1 = __fswab32(st->rxseq) [L5898] EXPR st->txseq [L5898] st->txseq = st->txseq + 1U [L5899] EXPR st->txseq VAL [\old(arg)=17179869184, __this_module={0:0}, arg=17179869184, cisco_header_ops={79:0}, dev={0:17179869184}, hdlc={0:17179872448}, jiffies=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, st={0:144255925564211200}, st->txseq=0, tmp={0:17179872448}, tmp___0={0:144255925564211200}, tmp___1=0] [L5899] CALL, EXPR __fswab32(st->txseq) VAL [__this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L5128] __u32 tmp ; [L5130] CALL, EXPR __arch_swab32(val) [L5117] return (val); VAL [\old(val)=0, \result=0, __this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, val=0] [L5130] RET, EXPR __arch_swab32(val) [L5130] tmp = __arch_swab32(val) [L5131] return (tmp); VAL [\old(val)=0, \result=0, __this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, tmp=0, val=0] [L5899] RET, EXPR __fswab32(st->txseq) VAL [\old(arg)=17179869184, __fswab32(st->txseq)=0, __this_module={0:0}, arg=17179869184, cisco_header_ops={79:0}, dev={0:17179869184}, hdlc={0:17179872448}, jiffies=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, st={0:144255925564211200}, st->txseq=0, tmp={0:17179872448}, tmp___0={0:144255925564211200}, tmp___1=0] [L5899] tmp___2 = __fswab32(st->txseq) [L5900] CALL cisco_keepalive_send(dev, 2U, tmp___2, tmp___1) VAL [\old(last_index)=0, __this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L5695] struct sk_buff *skb ; [L5696] struct cisco_packet *data ; [L5697] __u32 tmp ; [L5698] __u32 tmp___0 ; [L5700] CALL, EXPR ldv_dev_alloc_skb_12(22U) [L6356] struct sk_buff *tmp ; VAL [\old(last_index)=0, \old(length)=22, __this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, length=22, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L6358] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, __this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L6512] void *skb ; [L6513] void *tmp___7 ; VAL [\old(last_index)=0, __this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L6515] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L5519] void *p ; [L5520] void *tmp ; [L5521] int tmp___0 ; [L5523] tmp___0 = __VERIFIER_nondet_int() [L5524] COND FALSE !(tmp___0 != 0) [L5527] EXPR, FCALL calloc(1UL, size) [L5527] tmp = calloc(1UL, size) [L5528] p = tmp VAL [\old(last_index)=0, \old(size)=248, __this_module={0:0}, calloc(1UL, size)={31:0}, cisco_header_ops={79:0}, jiffies=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, p={31:0}, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, size=248, tmp={31:0}, tmp___0=0] [L5529] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, \old(last_index)=0, __this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L5498] COND FALSE !(!cond) VAL [\old(cond)=1, \old(last_index)=0, __this_module={0:0}, cisco_header_ops={79:0}, cond=1, jiffies=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L5529] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(last_index)=0, \old(size)=248, __this_module={0:0}, calloc(1UL, size)={31:0}, cisco_header_ops={79:0}, jiffies=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, p={31:0}, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, size=248, tmp={31:0}, tmp___0=0] [L5530] return (p); VAL [\old(last_index)=0, \old(size)=248, \result={31:0}, __this_module={0:0}, calloc(1UL, size)={31:0}, cisco_header_ops={79:0}, jiffies=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, p={31:0}, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, size=248, tmp={31:0}, tmp___0=0] [L6515] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(sizeof(struct sk_buff___0 ))={31:0}, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L6515] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L6516] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=0, __this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, skb={31:0}, tmp___7={31:0}] [L6517] COND FALSE !(! skb) [L6520] CALL ldv_set_add(LDV_SKBS, skb) [L6388] int i ; [L6390] i = 0 VAL [\old(last_index)=0, __this_module={0:0}, cisco_header_ops={79:0}, e={31:0}, e={31:0}, i=0, jiffies=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={78:0}] [L6391] COND TRUE 1 VAL [\old(last_index)=0, __this_module={0:0}, cisco_header_ops={79:0}, e={31:0}, e={31:0}, i=0, jiffies=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={78:0}] [L6392] COND FALSE !(i < last_index) VAL [\old(last_index)=0, __this_module={0:0}, cisco_header_ops={79:0}, e={31:0}, e={31:0}, i=0, jiffies=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={78:0}] [L6402] COND TRUE last_index < 15 [L6403] set_impl[last_index] = e [L6404] last_index = last_index + 1 VAL [\old(last_index)=0, __this_module={0:0}, cisco_header_ops={79:0}, e={31:0}, e={31:0}, i=0, jiffies=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={78:0}] [L6520] RET ldv_set_add(LDV_SKBS, skb) [L6521] return (skb); VAL [\old(last_index)=0, \result={31:0}, __this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, skb={31:0}, tmp___7={31:0}] [L6358] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, \old(length)=22, __this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, ldv_skb_alloc()={31:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, length=22, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L6358] tmp = ldv_skb_alloc() [L6359] return (tmp); VAL [\old(last_index)=0, \old(length)=22, \result={31:0}, __this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, length=22, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, tmp={31:0}] [L5700] RET, EXPR ldv_dev_alloc_skb_12(22U) [L5700] skb = ldv_dev_alloc_skb_12(22U) [L5701] COND FALSE !((unsigned long )skb == (unsigned long )((struct sk_buff *)0)) [L5706] CALL skb_reserve(skb, 4) [L5475] EXPR skb->data [L5475] skb->data = skb->data + (unsigned long )len [L5476] EXPR skb->tail [L5476] skb->tail = skb->tail + (sk_buff_data_t )len [L5706] RET skb_reserve(skb, 4) [L5707] CALL cisco_hard_header(skb, dev, 32821, (void const *)0, (void const *)0, 0U) VAL [\old(last_index)=0, __this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L5676] struct hdlc_header *data ; [L5677] __u16 tmp ; [L5679] CALL skb_push(skb, 4U) [L6687] CALL, EXPR ldv_malloc(sizeof(unsigned char)) VAL [\old(last_index)=0, \old(size)=1, __this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L5502] void *p ; [L5503] void *tmp ; [L5504] int tmp___0 ; [L5506] tmp___0 = __VERIFIER_nondet_int() [L5507] COND TRUE tmp___0 != 0 [L5508] return ((void *)0); VAL [\old(last_index)=0, \old(size)=1, \result={0:0}, __this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, size=1, tmp___0=2147483648] [L6687] RET, EXPR ldv_malloc(sizeof(unsigned char)) VAL [\old(arg1)=4, \old(last_index)=0, __this_module={0:0}, arg0={31:0}, arg0={31:0}, arg1=4, cisco_header_ops={79:0}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_malloc(sizeof(unsigned char))={0:0}, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L6687] return ldv_malloc(sizeof(unsigned char)); [L5679] RET skb_push(skb, 4U) [L5680] EXPR skb->data [L5680] data = (struct hdlc_header *)skb->data [L5681] COND TRUE (unsigned int )type == 32821U [L5682] data->address = 143U VAL [\old(last_index)=0, \old(len)=0, \old(type)=32821, __this_module={0:0}, cisco_header_ops={79:0}, daddr={0:0}, daddr={0:0}, data={31:160}, dev={0:17179869184}, dev={0:17179869184}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, len=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, saddr={0:0}, saddr={0:0}, set_impl={78:0}, skb={31:0}, skb={31:0}, type=32821] [L5686] data->control = 0U VAL [\old(last_index)=0, \old(len)=0, \old(type)=32821, __this_module={0:0}, cisco_header_ops={79:0}, daddr={0:0}, daddr={0:0}, data={31:160}, dev={0:17179869184}, dev={0:17179869184}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, len=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, saddr={0:0}, saddr={0:0}, set_impl={78:0}, skb={31:0}, skb={31:0}, type=32821] [L5687] CALL, EXPR __fswab16((int )type) VAL [\old(last_index)=0, \old(val)=32821, __this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L5123] return ((__u16 )((int )((short )((int )val << 8)) | (int )((short )((int )val >> 8)))); VAL [\old(last_index)=0, \old(val)=32821, \result=13696, __this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, val=32821] [L5687] RET, EXPR __fswab16((int )type) VAL [\old(last_index)=0, \old(len)=0, \old(type)=32821, __fswab16((int )type)=13696, __this_module={0:0}, cisco_header_ops={79:0}, daddr={0:0}, daddr={0:0}, data={31:160}, dev={0:17179869184}, dev={0:17179869184}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, len=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, saddr={0:0}, saddr={0:0}, set_impl={78:0}, skb={31:0}, skb={31:0}, type=32821] [L5687] tmp = __fswab16((int )type) [L5688] data->protocol = tmp [L5689] return (4); VAL [\old(last_index)=0, \old(len)=0, \old(type)=32821, \result=4, __this_module={0:0}, cisco_header_ops={79:0}, daddr={0:0}, daddr={0:0}, data={31:160}, dev={0:17179869184}, dev={0:17179869184}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, len=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, saddr={0:0}, saddr={0:0}, set_impl={78:0}, skb={31:0}, skb={31:0}, tmp=13696, type=32821] [L5707] RET cisco_hard_header(skb, dev, 32821, (void const *)0, (void const *)0, 0U) VAL [\old(last_index)=0, \old(par1)=0, \old(par2)=0, \old(type)=2, __this_module={0:0}, cisco_hard_header(skb, dev, 32821, (void const *)0, (void const *)0, 0U)=4, cisco_header_ops={79:0}, dev={0:17179869184}, dev={0:17179869184}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, par1=0, par2=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, skb={31:0}, type=2] [L5708] EXPR skb->data [L5708] data = (struct cisco_packet *)skb->data + 4U [L5709] CALL, EXPR __fswab32(type) VAL [\old(last_index)=0, __this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L5128] __u32 tmp ; [L5130] CALL, EXPR __arch_swab32(val) [L5117] return (val); VAL [\old(last_index)=0, \old(val)=2, \result=2, __this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, val=2] [L5130] RET, EXPR __arch_swab32(val) [L5130] tmp = __arch_swab32(val) [L5131] return (tmp); VAL [\old(last_index)=0, \old(val)=2, \result=2, __this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, tmp=2, val=2] [L5709] RET, EXPR __fswab32(type) VAL [\old(last_index)=0, \old(par1)=0, \old(par2)=0, \old(type)=2, __fswab32(type)=2, __this_module={0:0}, cisco_header_ops={79:0}, data={31:232}, dev={0:17179869184}, dev={0:17179869184}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, par1=0, par2=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, skb={31:0}, type=2] [L5709] tmp = __fswab32(type) [L5710] data->type = tmp [L5711] data->par1 = par1 [L5712] data->par2 = par2 [L5713] data->rel = 65535U VAL [\old(last_index)=0, \old(par1)=0, \old(par2)=0, \old(type)=2, __this_module={0:0}, cisco_header_ops={79:0}, data={31:232}, dev={0:17179869184}, dev={0:17179869184}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, par1=0, par2=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, skb={31:0}, tmp=2, type=2] [L5714] CALL, EXPR __fswab32(((__u32 )jiffies + 75000U) * 4U) VAL [\old(last_index)=0, __this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L5128] __u32 tmp ; [L5130] CALL, EXPR __arch_swab32(val) [L5117] return (val); VAL [\old(last_index)=0, \old(val)=300000, \result=300000, __this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, val=300000] [L5130] RET, EXPR __arch_swab32(val) [L5130] tmp = __arch_swab32(val) [L5131] return (tmp); VAL [\old(last_index)=0, \old(val)=300000, \result=300000, __this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, tmp=300000, val=300000] [L5714] RET, EXPR __fswab32(((__u32 )jiffies + 75000U) * 4U) VAL [\old(last_index)=0, \old(par1)=0, \old(par2)=0, \old(type)=2, __fswab32(((__u32 )jiffies + 75000U) * 4U)=300000, __this_module={0:0}, cisco_header_ops={79:0}, data={31:232}, dev={0:17179869184}, dev={0:17179869184}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, par1=0, par2=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, skb={31:0}, tmp=2, type=2] [L5714] tmp___0 = __fswab32(((__u32 )jiffies + 75000U) * 4U) [L5715] data->time = tmp___0 [L5716] CALL skb_put(skb, 18U) [L6690] EXPR arg0->data [L6690] EXPR arg0->tail [L6690] unsigned char *ret_val = arg0->data + arg0->tail; [L6691] EXPR arg0->tail [L6691] arg0->tail += arg1 [L6692] return ret_val; VAL [\old(arg1)=18, \old(last_index)=0, \result={0:8589934596}, __this_module={0:0}, arg0={31:0}, arg0={31:0}, arg1=18, cisco_header_ops={79:0}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, ret_val={0:8589934596}, set_impl={78:0}] [L5716] RET skb_put(skb, 18U) [L5717] skb->priority = 7U [L5718] skb->dev = dev [L5719] CALL skb_reset_network_header(skb) [L5483] EXPR skb->data [L5483] EXPR skb->head [L5483] skb->network_header = (int )((__u16 )((long )skb->data)) - (int )((__u16 )((long )skb->head)) [L5719] RET skb_reset_network_header(skb) [L5720] CALL dev_queue_xmit(skb) [L6643] return __VERIFIER_nondet_int(); [L5720] RET dev_queue_xmit(skb) [L5900] RET cisco_keepalive_send(dev, 2U, tmp___2, tmp___1) VAL [\old(arg)=17179869184, __this_module={0:0}, arg=17179869184, cisco_header_ops={79:0}, dev={0:17179869184}, hdlc={0:17179872448}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, st={0:144255925564211200}, tmp={0:17179872448}, tmp___0={0:144255925564211200}, tmp___1=0, tmp___2=0] [L5901] CALL spin_unlock(& st->lock) VAL [__this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L5270] FCALL _raw_spin_unlock(& lock->ldv_6338.rlock) [L5901] RET spin_unlock(& st->lock) VAL [\old(arg)=17179869184, __this_module={0:0}, arg=17179869184, cisco_header_ops={79:0}, dev={0:17179869184}, hdlc={0:17179872448}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, st={0:144255925564211200}, tmp={0:17179872448}, tmp___0={0:144255925564211200}, tmp___1=0, tmp___2=0] [L5902] EXPR st->settings.interval [L5902] st->timer.expires = (unsigned long )(st->settings.interval * 250U) + (unsigned long )jiffies [L5903] st->timer.function = & cisco_timer [L5904] st->timer.data = arg VAL [\old(arg)=17179869184, __this_module={0:0}, arg=17179869184, cisco_header_ops={79:0}, dev={0:17179869184}, hdlc={0:17179872448}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, st={0:144255925564211200}, tmp={0:17179872448}, tmp___0={0:144255925564211200}, tmp___1=0, tmp___2=0] [L5905] FCALL add_timer(& st->timer) VAL [\old(arg)=17179869184, __this_module={0:0}, arg=17179869184, cisco_header_ops={79:0}, dev={0:17179869184}, hdlc={0:17179872448}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, st={0:144255925564211200}, tmp={0:17179872448}, tmp___0={0:144255925564211200}, tmp___1=0, tmp___2=0] [L6115] RET (*(timer->function))(timer->data) [L6116] LDV_IN_INTERRUPT = 1 [L6117] ldv_timer_state_1 = 2 VAL [__this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, timer={0:0}, timer={0:0}] [L6186] RET choose_timer_1(ldv_timer_list_1) [L6182] tmp___6 = __VERIFIER_nondet_int() [L6184] case 0: [L6190] case 1: VAL [__this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=5, ldvarg5={0:0}, ldvarg6={0:0}, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, tmp={0:0}, tmp___0=5, tmp___1=5, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=1] [L6191] COND TRUE ldv_state_variable_0 != 0 [L6192] tmp___7 = __VERIFIER_nondet_int() [L6194] case 0: VAL [__this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=5, ldvarg5={0:0}, ldvarg6={0:0}, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, tmp={0:0}, tmp___0=5, tmp___1=5, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=0] [L6195] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L6196] CALL mod_exit() [L6074] FCALL unregister_hdlc_protocol(& proto) [L6196] RET mod_exit() [L6197] ldv_state_variable_0 = 2 VAL [__this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=5, ldvarg5={0:0}, ldvarg6={0:0}, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, tmp={0:0}, tmp___0=5, tmp___1=5, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=0] [L6315] CALL ldv_check_final_state() [L6579] int tmp___7 ; [L6581] CALL, EXPR ldv_set_is_empty(LDV_SKBS) [L6470] return (last_index == 0); VAL [\result=0, __this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={78:0}] [L6581] RET, EXPR ldv_set_is_empty(LDV_SKBS) [L6581] tmp___7 = ldv_set_is_empty(LDV_SKBS) [L6582] COND FALSE !(\read(tmp___7)) VAL [__this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}, tmp___7=0] [L6584] CALL ldv_error() VAL [__this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] [L5554] reach_error() VAL [__this_module={0:0}, cisco_header_ops={79:0}, jiffies=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, proto={-9223372036854775731:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={78:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 33 procedures, 489 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 34.8s, OverallIterations: 6, TraceHistogramMax: 8, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 11.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3214 SdHoareTripleChecker+Valid, 9.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3211 mSDsluCounter, 17015 SdHoareTripleChecker+Invalid, 8.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 13300 mSDsCounter, 237 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 411 IncrementalHoareTripleChecker+Invalid, 648 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 237 mSolverCounterUnsat, 3715 mSDtfsCounter, 411 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 913 GetRequests, 876 SyntacticMatches, 0 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 42 ImplicationChecksByTransitivity, 1.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=2806occurred in iteration=5, InterpolantAutomatonStates: 30, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.9s AutomataMinimizationTime, 5 MinimizatonAttempts, 54 StatesRemovedByMinimization, 2 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 5.1s SatisfiabilityAnalysisTime, 6.0s InterpolantComputationTime, 640 NumberOfCodeBlocks, 640 NumberOfCodeBlocksAsserted, 6 NumberOfCheckSat, 904 ConstructedInterpolants, 0 QuantifiedInterpolants, 1320 SizeOfPredicates, 21 NumberOfNonLiveVariables, 1875 ConjunctsInSsa, 43 ConjunctsInUnsatCore, 10 InterpolantComputations, 10 PerfectInterpolantSequences, 838/838 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! [2021-11-19 15:06:01,706 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c06592bb-f222-445d-b4e1-56475608be6e/bin/utaipan-UbGMyvGFUs/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Writing human readable error path to file UltimateCounterExample.errorpath Result: FALSE