./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--lapbether.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 839c364b Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_29ed8685-0354-479a-8fe4-7439563a3966/bin/utaipan-eEHZpOm5b7/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_29ed8685-0354-479a-8fe4-7439563a3966/bin/utaipan-eEHZpOm5b7/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_29ed8685-0354-479a-8fe4-7439563a3966/bin/utaipan-eEHZpOm5b7/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_29ed8685-0354-479a-8fe4-7439563a3966/bin/utaipan-eEHZpOm5b7/config/TaipanReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--lapbether.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_29ed8685-0354-479a-8fe4-7439563a3966/bin/utaipan-eEHZpOm5b7/config/svcomp-Reach-64bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_29ed8685-0354-479a-8fe4-7439563a3966/bin/utaipan-eEHZpOm5b7 --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 3c9185451e17cd03a558fe9bd455bfb656de587a9df23cb7cc44d8e38d5b1098 --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-11-25 20:39:42,975 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-25 20:39:42,978 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-25 20:39:43,031 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-25 20:39:43,032 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-25 20:39:43,033 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-25 20:39:43,035 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-25 20:39:43,037 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-25 20:39:43,039 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-25 20:39:43,040 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-25 20:39:43,041 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-25 20:39:43,042 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-25 20:39:43,043 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-25 20:39:43,044 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-25 20:39:43,045 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-25 20:39:43,047 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-25 20:39:43,048 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-25 20:39:43,049 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-25 20:39:43,051 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-25 20:39:43,054 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-25 20:39:43,056 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-25 20:39:43,057 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-25 20:39:43,059 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-25 20:39:43,059 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-25 20:39:43,063 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-25 20:39:43,064 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-25 20:39:43,064 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-25 20:39:43,065 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-25 20:39:43,066 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-25 20:39:43,067 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-25 20:39:43,067 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-25 20:39:43,068 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-25 20:39:43,069 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-25 20:39:43,070 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-25 20:39:43,071 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-25 20:39:43,072 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-25 20:39:43,073 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-25 20:39:43,073 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-25 20:39:43,073 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-25 20:39:43,074 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-25 20:39:43,075 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-25 20:39:43,076 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_29ed8685-0354-479a-8fe4-7439563a3966/bin/utaipan-eEHZpOm5b7/config/svcomp-Reach-64bit-Taipan_Default.epf [2021-11-25 20:39:43,115 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-25 20:39:43,116 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-25 20:39:43,116 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-25 20:39:43,116 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-25 20:39:43,117 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-25 20:39:43,117 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-25 20:39:43,118 INFO L138 SettingsManager]: * User list type=DISABLED [2021-11-25 20:39:43,118 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2021-11-25 20:39:43,118 INFO L138 SettingsManager]: * Explicit value domain=true [2021-11-25 20:39:43,118 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2021-11-25 20:39:43,119 INFO L138 SettingsManager]: * Octagon Domain=false [2021-11-25 20:39:43,119 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2021-11-25 20:39:43,119 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2021-11-25 20:39:43,119 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2021-11-25 20:39:43,119 INFO L138 SettingsManager]: * Interval Domain=false [2021-11-25 20:39:43,120 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2021-11-25 20:39:43,120 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2021-11-25 20:39:43,120 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2021-11-25 20:39:43,121 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-25 20:39:43,121 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-25 20:39:43,121 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-25 20:39:43,122 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-25 20:39:43,122 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-25 20:39:43,122 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-25 20:39:43,122 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-25 20:39:43,122 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-25 20:39:43,123 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-25 20:39:43,123 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-25 20:39:43,123 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-25 20:39:43,123 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-25 20:39:43,124 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-25 20:39:43,124 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-25 20:39:43,124 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-25 20:39:43,124 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2021-11-25 20:39:43,125 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-25 20:39:43,125 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-25 20:39:43,125 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-25 20:39:43,125 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-11-25 20:39:43,125 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_29ed8685-0354-479a-8fe4-7439563a3966/bin/utaipan-eEHZpOm5b7/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_29ed8685-0354-479a-8fe4-7439563a3966/bin/utaipan-eEHZpOm5b7 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 3c9185451e17cd03a558fe9bd455bfb656de587a9df23cb7cc44d8e38d5b1098 [2021-11-25 20:39:43,367 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-25 20:39:43,386 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-25 20:39:43,389 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-25 20:39:43,390 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-25 20:39:43,391 INFO L275 PluginConnector]: CDTParser initialized [2021-11-25 20:39:43,392 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_29ed8685-0354-479a-8fe4-7439563a3966/bin/utaipan-eEHZpOm5b7/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--lapbether.ko-entry_point.cil.out.i [2021-11-25 20:39:43,478 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_29ed8685-0354-479a-8fe4-7439563a3966/bin/utaipan-eEHZpOm5b7/data/208bd775b/db818a91492f4dc0b3ac6c9bc90437cb/FLAG504c766bc [2021-11-25 20:39:44,261 INFO L306 CDTParser]: Found 1 translation units. [2021-11-25 20:39:44,262 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_29ed8685-0354-479a-8fe4-7439563a3966/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--lapbether.ko-entry_point.cil.out.i [2021-11-25 20:39:44,304 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_29ed8685-0354-479a-8fe4-7439563a3966/bin/utaipan-eEHZpOm5b7/data/208bd775b/db818a91492f4dc0b3ac6c9bc90437cb/FLAG504c766bc [2021-11-25 20:39:44,352 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_29ed8685-0354-479a-8fe4-7439563a3966/bin/utaipan-eEHZpOm5b7/data/208bd775b/db818a91492f4dc0b3ac6c9bc90437cb [2021-11-25 20:39:44,354 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-25 20:39:44,355 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-25 20:39:44,358 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-25 20:39:44,358 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-25 20:39:44,361 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-25 20:39:44,362 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.11 08:39:44" (1/1) ... [2021-11-25 20:39:44,364 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5cb11256 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 08:39:44, skipping insertion in model container [2021-11-25 20:39:44,364 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.11 08:39:44" (1/1) ... [2021-11-25 20:39:44,372 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-25 20:39:44,513 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-25 20:39:45,491 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_29ed8685-0354-479a-8fe4-7439563a3966/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--lapbether.ko-entry_point.cil.out.i[174669,174682] [2021-11-25 20:39:45,883 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-25 20:39:45,915 INFO L203 MainTranslator]: Completed pre-run [2021-11-25 20:39:46,071 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_29ed8685-0354-479a-8fe4-7439563a3966/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--lapbether.ko-entry_point.cil.out.i[174669,174682] [2021-11-25 20:39:46,195 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-25 20:39:46,285 INFO L208 MainTranslator]: Completed translation [2021-11-25 20:39:46,286 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 08:39:46 WrapperNode [2021-11-25 20:39:46,286 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-25 20:39:46,288 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-25 20:39:46,288 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-25 20:39:46,288 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-25 20:39:46,295 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 08:39:46" (1/1) ... [2021-11-25 20:39:46,365 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 08:39:46" (1/1) ... [2021-11-25 20:39:46,479 INFO L137 Inliner]: procedures = 177, calls = 512, calls flagged for inlining = 97, calls inlined = 94, statements flattened = 1880 [2021-11-25 20:39:46,479 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-25 20:39:46,481 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-25 20:39:46,481 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-25 20:39:46,482 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-25 20:39:46,491 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 08:39:46" (1/1) ... [2021-11-25 20:39:46,491 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 08:39:46" (1/1) ... [2021-11-25 20:39:46,514 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 08:39:46" (1/1) ... [2021-11-25 20:39:46,519 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 08:39:46" (1/1) ... [2021-11-25 20:39:46,602 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 08:39:46" (1/1) ... [2021-11-25 20:39:46,631 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 08:39:46" (1/1) ... [2021-11-25 20:39:46,654 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 08:39:46" (1/1) ... [2021-11-25 20:39:46,678 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-25 20:39:46,680 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-25 20:39:46,681 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-25 20:39:46,681 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-25 20:39:46,682 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 08:39:46" (1/1) ... [2021-11-25 20:39:46,689 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-25 20:39:46,700 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_29ed8685-0354-479a-8fe4-7439563a3966/bin/utaipan-eEHZpOm5b7/z3 [2021-11-25 20:39:46,716 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_29ed8685-0354-479a-8fe4-7439563a3966/bin/utaipan-eEHZpOm5b7/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-25 20:39:46,743 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_29ed8685-0354-479a-8fe4-7439563a3966/bin/utaipan-eEHZpOm5b7/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-25 20:39:46,792 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2021-11-25 20:39:46,792 INFO L130 BoogieDeclarations]: Found specification of procedure strncmp [2021-11-25 20:39:46,792 INFO L130 BoogieDeclarations]: Found specification of procedure dev_put [2021-11-25 20:39:46,792 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_put [2021-11-25 20:39:46,793 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-11-25 20:39:46,793 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-11-25 20:39:46,793 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_18 [2021-11-25 20:39:46,793 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_18 [2021-11-25 20:39:46,793 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-11-25 20:39:46,793 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-11-25 20:39:46,794 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-11-25 20:39:46,794 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2021-11-25 20:39:46,794 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2021-11-25 20:39:46,794 INFO L130 BoogieDeclarations]: Found specification of procedure skb_headroom [2021-11-25 20:39:46,795 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_headroom [2021-11-25 20:39:46,795 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2021-11-25 20:39:46,795 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2021-11-25 20:39:46,795 INFO L130 BoogieDeclarations]: Found specification of procedure debug_lockdep_rcu_enabled [2021-11-25 20:39:46,795 INFO L138 BoogieDeclarations]: Found implementation of procedure debug_lockdep_rcu_enabled [2021-11-25 20:39:46,795 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_free [2021-11-25 20:39:46,796 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_free [2021-11-25 20:39:46,796 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-11-25 20:39:46,796 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-11-25 20:39:46,796 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_size_call_parameter [2021-11-25 20:39:46,796 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_is_watching [2021-11-25 20:39:46,796 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_is_watching [2021-11-25 20:39:46,797 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_read_lock_held [2021-11-25 20:39:46,797 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_read_lock_held [2021-11-25 20:39:46,797 INFO L130 BoogieDeclarations]: Found specification of procedure lapbeth_disconnected [2021-11-25 20:39:46,797 INFO L138 BoogieDeclarations]: Found implementation of procedure lapbeth_disconnected [2021-11-25 20:39:46,797 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2021-11-25 20:39:46,797 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2021-11-25 20:39:46,798 INFO L130 BoogieDeclarations]: Found specification of procedure lapbeth_data_transmit [2021-11-25 20:39:46,798 INFO L138 BoogieDeclarations]: Found implementation of procedure lapbeth_data_transmit [2021-11-25 20:39:46,798 INFO L130 BoogieDeclarations]: Found specification of procedure lapbeth_data_indication [2021-11-25 20:39:46,798 INFO L138 BoogieDeclarations]: Found implementation of procedure lapbeth_data_indication [2021-11-25 20:39:46,798 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2021-11-25 20:39:46,798 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-11-25 20:39:46,799 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-11-25 20:39:46,799 INFO L130 BoogieDeclarations]: Found specification of procedure skb_pull [2021-11-25 20:39:46,799 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_pull [2021-11-25 20:39:46,799 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-11-25 20:39:46,799 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-11-25 20:39:46,799 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2021-11-25 20:39:46,800 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2021-11-25 20:39:46,800 INFO L130 BoogieDeclarations]: Found specification of procedure lapbeth_set_mac_address [2021-11-25 20:39:46,800 INFO L138 BoogieDeclarations]: Found implementation of procedure lapbeth_set_mac_address [2021-11-25 20:39:46,800 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-11-25 20:39:46,800 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-11-25 20:39:46,800 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-25 20:39:46,801 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_free_int [2021-11-25 20:39:46,801 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_free_int [2021-11-25 20:39:46,801 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-25 20:39:46,801 INFO L130 BoogieDeclarations]: Found specification of procedure x25_type_trans [2021-11-25 20:39:46,801 INFO L138 BoogieDeclarations]: Found implementation of procedure x25_type_trans [2021-11-25 20:39:46,801 INFO L130 BoogieDeclarations]: Found specification of procedure dev_net [2021-11-25 20:39:46,802 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_net [2021-11-25 20:39:46,802 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-25 20:39:46,802 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-25 20:39:46,802 INFO L130 BoogieDeclarations]: Found specification of procedure lockdep_rcu_suspicious [2021-11-25 20:39:46,802 INFO L138 BoogieDeclarations]: Found implementation of procedure lockdep_rcu_suspicious [2021-11-25 20:39:46,803 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_percpu_size [2021-11-25 20:39:46,803 INFO L130 BoogieDeclarations]: Found specification of procedure lapbeth_get_x25_dev [2021-11-25 20:39:46,803 INFO L138 BoogieDeclarations]: Found implementation of procedure lapbeth_get_x25_dev [2021-11-25 20:39:46,803 INFO L130 BoogieDeclarations]: Found specification of procedure skb_headlen [2021-11-25 20:39:46,803 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_headlen [2021-11-25 20:39:46,803 INFO L130 BoogieDeclarations]: Found specification of procedure netif_running [2021-11-25 20:39:46,803 INFO L138 BoogieDeclarations]: Found implementation of procedure netif_running [2021-11-25 20:39:46,804 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-25 20:39:46,804 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_remove [2021-11-25 20:39:46,804 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_remove [2021-11-25 20:39:46,804 INFO L130 BoogieDeclarations]: Found specification of procedure lapbeth_connected [2021-11-25 20:39:46,804 INFO L138 BoogieDeclarations]: Found implementation of procedure lapbeth_connected [2021-11-25 20:39:46,804 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-25 20:39:46,805 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-25 20:39:46,805 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2021-11-25 20:39:46,805 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2021-11-25 20:39:46,805 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_successful_zalloc [2021-11-25 20:39:46,805 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_successful_zalloc [2021-11-25 20:39:46,805 INFO L130 BoogieDeclarations]: Found specification of procedure netdev_priv [2021-11-25 20:39:46,806 INFO L138 BoogieDeclarations]: Found implementation of procedure netdev_priv [2021-11-25 20:39:46,806 INFO L130 BoogieDeclarations]: Found specification of procedure netdev_get_tx_queue [2021-11-25 20:39:46,806 INFO L138 BoogieDeclarations]: Found implementation of procedure netdev_get_tx_queue [2021-11-25 20:39:46,806 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-25 20:39:46,806 INFO L130 BoogieDeclarations]: Found specification of procedure unregister_netdevice [2021-11-25 20:39:46,807 INFO L138 BoogieDeclarations]: Found implementation of procedure unregister_netdevice [2021-11-25 20:39:46,807 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2021-11-25 20:39:46,807 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-25 20:39:46,807 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-25 20:39:47,292 INFO L236 CfgBuilder]: Building ICFG [2021-11-25 20:39:47,295 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-25 20:39:47,528 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-11-25 20:39:48,651 INFO L277 CfgBuilder]: Performing block encoding [2021-11-25 20:39:49,417 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-25 20:39:49,418 INFO L301 CfgBuilder]: Removed 3 assume(true) statements. [2021-11-25 20:39:49,423 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 08:39:49 BoogieIcfgContainer [2021-11-25 20:39:49,423 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-25 20:39:49,425 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-25 20:39:49,425 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-25 20:39:49,429 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-25 20:39:49,429 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 25.11 08:39:44" (1/3) ... [2021-11-25 20:39:49,430 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@55655d42 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.11 08:39:49, skipping insertion in model container [2021-11-25 20:39:49,431 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 08:39:46" (2/3) ... [2021-11-25 20:39:49,431 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@55655d42 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.11 08:39:49, skipping insertion in model container [2021-11-25 20:39:49,431 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 08:39:49" (3/3) ... [2021-11-25 20:39:49,439 INFO L111 eAbstractionObserver]: Analyzing ICFG 205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--lapbether.ko-entry_point.cil.out.i [2021-11-25 20:39:49,445 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-25 20:39:49,446 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-25 20:39:49,507 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-25 20:39:49,516 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-25 20:39:49,517 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-25 20:39:49,559 INFO L276 IsEmpty]: Start isEmpty. Operand has 424 states, 282 states have (on average 1.3936170212765957) internal successors, (393), 292 states have internal predecessors, (393), 106 states have call successors, (106), 35 states have call predecessors, (106), 34 states have return successors, (100), 100 states have call predecessors, (100), 100 states have call successors, (100) [2021-11-25 20:39:49,582 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2021-11-25 20:39:49,582 INFO L506 BasicCegarLoop]: Found error trace [2021-11-25 20:39:49,583 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 8, 8, 8, 8, 8, 8, 8, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-25 20:39:49,584 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-25 20:39:49,589 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-25 20:39:49,590 INFO L85 PathProgramCache]: Analyzing trace with hash -779669352, now seen corresponding path program 1 times [2021-11-25 20:39:49,599 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-25 20:39:49,600 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [152602967] [2021-11-25 20:39:49,601 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-25 20:39:49,609 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-25 20:39:49,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-25 20:39:50,195 INFO L134 CoverageAnalysis]: Checked inductivity of 280 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 280 trivial. 0 not checked. [2021-11-25 20:39:50,196 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-25 20:39:50,196 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [152602967] [2021-11-25 20:39:50,197 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [152602967] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-25 20:39:50,197 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-25 20:39:50,197 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-25 20:39:50,199 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [247833558] [2021-11-25 20:39:50,199 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-25 20:39:50,219 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-25 20:39:50,220 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-25 20:39:50,244 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-25 20:39:50,244 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-25 20:39:50,247 INFO L87 Difference]: Start difference. First operand has 424 states, 282 states have (on average 1.3936170212765957) internal successors, (393), 292 states have internal predecessors, (393), 106 states have call successors, (106), 35 states have call predecessors, (106), 34 states have return successors, (100), 100 states have call predecessors, (100), 100 states have call successors, (100) Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (11), 2 states have call predecessors, (11), 1 states have return successors, (10), 1 states have call predecessors, (10), 1 states have call successors, (10) [2021-11-25 20:39:50,835 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-25 20:39:50,836 INFO L93 Difference]: Finished difference Result 1217 states and 1764 transitions. [2021-11-25 20:39:50,837 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-25 20:39:50,838 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (11), 2 states have call predecessors, (11), 1 states have return successors, (10), 1 states have call predecessors, (10), 1 states have call successors, (10) Word has length 109 [2021-11-25 20:39:50,839 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-25 20:39:50,866 INFO L225 Difference]: With dead ends: 1217 [2021-11-25 20:39:50,866 INFO L226 Difference]: Without dead ends: 794 [2021-11-25 20:39:50,880 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-25 20:39:50,891 INFO L933 BasicCegarLoop]: 597 mSDtfsCounter, 535 mSDsluCounter, 582 mSDsCounter, 0 mSdLazyCounter, 179 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 535 SdHoareTripleChecker+Valid, 1099 SdHoareTripleChecker+Invalid, 188 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 179 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-11-25 20:39:50,893 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [535 Valid, 1099 Invalid, 188 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 179 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-11-25 20:39:50,913 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 794 states. [2021-11-25 20:39:51,038 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 794 to 794. [2021-11-25 20:39:51,040 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 794 states, 541 states have (on average 1.3604436229205175) internal successors, (736), 545 states have internal predecessors, (736), 186 states have call successors, (186), 67 states have call predecessors, (186), 66 states have return successors, (185), 185 states have call predecessors, (185), 185 states have call successors, (185) [2021-11-25 20:39:51,048 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 794 states to 794 states and 1107 transitions. [2021-11-25 20:39:51,049 INFO L78 Accepts]: Start accepts. Automaton has 794 states and 1107 transitions. Word has length 109 [2021-11-25 20:39:51,050 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-25 20:39:51,050 INFO L470 AbstractCegarLoop]: Abstraction has 794 states and 1107 transitions. [2021-11-25 20:39:51,051 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (11), 2 states have call predecessors, (11), 1 states have return successors, (10), 1 states have call predecessors, (10), 1 states have call successors, (10) [2021-11-25 20:39:51,051 INFO L276 IsEmpty]: Start isEmpty. Operand 794 states and 1107 transitions. [2021-11-25 20:39:51,054 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 112 [2021-11-25 20:39:51,054 INFO L506 BasicCegarLoop]: Found error trace [2021-11-25 20:39:51,055 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 8, 8, 8, 8, 8, 8, 8, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-25 20:39:51,055 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-25 20:39:51,055 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-25 20:39:51,056 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-25 20:39:51,056 INFO L85 PathProgramCache]: Analyzing trace with hash 1747680966, now seen corresponding path program 1 times [2021-11-25 20:39:51,056 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-25 20:39:51,056 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [798397952] [2021-11-25 20:39:51,057 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-25 20:39:51,057 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-25 20:39:51,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-25 20:39:51,231 INFO L134 CoverageAnalysis]: Checked inductivity of 280 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 280 trivial. 0 not checked. [2021-11-25 20:39:51,232 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-25 20:39:51,232 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [798397952] [2021-11-25 20:39:51,232 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [798397952] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-25 20:39:51,232 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-25 20:39:51,233 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-25 20:39:51,233 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [137874176] [2021-11-25 20:39:51,233 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-25 20:39:51,234 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-25 20:39:51,235 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-25 20:39:51,235 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-25 20:39:51,235 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-25 20:39:51,236 INFO L87 Difference]: Start difference. First operand 794 states and 1107 transitions. Second operand has 4 states, 4 states have (on average 6.75) internal successors, (27), 4 states have internal predecessors, (27), 2 states have call successors, (11), 2 states have call predecessors, (11), 1 states have return successors, (10), 1 states have call predecessors, (10), 1 states have call successors, (10) [2021-11-25 20:39:51,712 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-25 20:39:51,713 INFO L93 Difference]: Finished difference Result 1571 states and 2233 transitions. [2021-11-25 20:39:51,713 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-25 20:39:51,713 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 6.75) internal successors, (27), 4 states have internal predecessors, (27), 2 states have call successors, (11), 2 states have call predecessors, (11), 1 states have return successors, (10), 1 states have call predecessors, (10), 1 states have call successors, (10) Word has length 111 [2021-11-25 20:39:51,714 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-25 20:39:51,727 INFO L225 Difference]: With dead ends: 1571 [2021-11-25 20:39:51,728 INFO L226 Difference]: Without dead ends: 1561 [2021-11-25 20:39:51,729 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-11-25 20:39:51,730 INFO L933 BasicCegarLoop]: 602 mSDtfsCounter, 562 mSDsluCounter, 1254 mSDsCounter, 0 mSdLazyCounter, 277 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 562 SdHoareTripleChecker+Valid, 1693 SdHoareTripleChecker+Invalid, 278 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 277 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-11-25 20:39:51,731 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [562 Valid, 1693 Invalid, 278 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 277 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-11-25 20:39:51,734 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1561 states. [2021-11-25 20:39:51,862 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1561 to 1553. [2021-11-25 20:39:51,869 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1553 states, 1059 states have (on average 1.3626062322946175) internal successors, (1443), 1067 states have internal predecessors, (1443), 361 states have call successors, (361), 133 states have call predecessors, (361), 132 states have return successors, (404), 360 states have call predecessors, (404), 360 states have call successors, (404) [2021-11-25 20:39:51,881 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1553 states to 1553 states and 2208 transitions. [2021-11-25 20:39:51,882 INFO L78 Accepts]: Start accepts. Automaton has 1553 states and 2208 transitions. Word has length 111 [2021-11-25 20:39:51,883 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-25 20:39:51,883 INFO L470 AbstractCegarLoop]: Abstraction has 1553 states and 2208 transitions. [2021-11-25 20:39:51,883 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 6.75) internal successors, (27), 4 states have internal predecessors, (27), 2 states have call successors, (11), 2 states have call predecessors, (11), 1 states have return successors, (10), 1 states have call predecessors, (10), 1 states have call successors, (10) [2021-11-25 20:39:51,883 INFO L276 IsEmpty]: Start isEmpty. Operand 1553 states and 2208 transitions. [2021-11-25 20:39:51,898 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 144 [2021-11-25 20:39:51,898 INFO L506 BasicCegarLoop]: Found error trace [2021-11-25 20:39:51,898 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 8, 8, 8, 8, 8, 8, 8, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-25 20:39:51,899 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-25 20:39:51,899 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-25 20:39:51,900 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-25 20:39:51,900 INFO L85 PathProgramCache]: Analyzing trace with hash 1658026480, now seen corresponding path program 1 times [2021-11-25 20:39:51,900 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-25 20:39:51,900 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1160391124] [2021-11-25 20:39:51,901 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-25 20:39:51,901 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-25 20:39:51,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-25 20:39:52,093 INFO L134 CoverageAnalysis]: Checked inductivity of 284 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 280 trivial. 0 not checked. [2021-11-25 20:39:52,093 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-25 20:39:52,094 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1160391124] [2021-11-25 20:39:52,094 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1160391124] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-25 20:39:52,094 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-25 20:39:52,094 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-25 20:39:52,094 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [17496429] [2021-11-25 20:39:52,094 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-25 20:39:52,095 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-25 20:39:52,095 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-25 20:39:52,095 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-25 20:39:52,095 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-25 20:39:52,096 INFO L87 Difference]: Start difference. First operand 1553 states and 2208 transitions. Second operand has 3 states, 3 states have (on average 17.666666666666668) internal successors, (53), 3 states have internal predecessors, (53), 2 states have call successors, (14), 2 states have call predecessors, (14), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2021-11-25 20:39:52,530 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-25 20:39:52,530 INFO L93 Difference]: Finished difference Result 4415 states and 6243 transitions. [2021-11-25 20:39:52,530 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-25 20:39:52,530 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 17.666666666666668) internal successors, (53), 3 states have internal predecessors, (53), 2 states have call successors, (14), 2 states have call predecessors, (14), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) Word has length 143 [2021-11-25 20:39:52,532 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-25 20:39:52,554 INFO L225 Difference]: With dead ends: 4415 [2021-11-25 20:39:52,554 INFO L226 Difference]: Without dead ends: 2879 [2021-11-25 20:39:52,562 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-25 20:39:52,569 INFO L933 BasicCegarLoop]: 578 mSDtfsCounter, 484 mSDsluCounter, 531 mSDsCounter, 0 mSdLazyCounter, 186 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 484 SdHoareTripleChecker+Valid, 1033 SdHoareTripleChecker+Invalid, 188 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 186 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-11-25 20:39:52,570 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [484 Valid, 1033 Invalid, 188 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 186 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-11-25 20:39:52,576 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2879 states. [2021-11-25 20:39:52,757 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2879 to 2874. [2021-11-25 20:39:52,763 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2874 states, 1950 states have (on average 1.3502564102564103) internal successors, (2633), 1966 states have internal predecessors, (2633), 667 states have call successors, (667), 257 states have call predecessors, (667), 256 states have return successors, (752), 666 states have call predecessors, (752), 666 states have call successors, (752) [2021-11-25 20:39:52,787 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2874 states to 2874 states and 4052 transitions. [2021-11-25 20:39:52,789 INFO L78 Accepts]: Start accepts. Automaton has 2874 states and 4052 transitions. Word has length 143 [2021-11-25 20:39:52,795 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-25 20:39:52,795 INFO L470 AbstractCegarLoop]: Abstraction has 2874 states and 4052 transitions. [2021-11-25 20:39:52,797 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 17.666666666666668) internal successors, (53), 3 states have internal predecessors, (53), 2 states have call successors, (14), 2 states have call predecessors, (14), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2021-11-25 20:39:52,797 INFO L276 IsEmpty]: Start isEmpty. Operand 2874 states and 4052 transitions. [2021-11-25 20:39:52,803 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 143 [2021-11-25 20:39:52,803 INFO L506 BasicCegarLoop]: Found error trace [2021-11-25 20:39:52,803 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 8, 8, 8, 8, 8, 8, 8, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-25 20:39:52,804 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-25 20:39:52,804 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-25 20:39:52,806 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-25 20:39:52,807 INFO L85 PathProgramCache]: Analyzing trace with hash 487643122, now seen corresponding path program 1 times [2021-11-25 20:39:52,808 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-25 20:39:52,808 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1199939142] [2021-11-25 20:39:52,809 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-25 20:39:52,809 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-25 20:39:52,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-25 20:39:52,984 INFO L134 CoverageAnalysis]: Checked inductivity of 284 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 280 trivial. 0 not checked. [2021-11-25 20:39:52,984 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-25 20:39:52,985 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1199939142] [2021-11-25 20:39:52,985 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1199939142] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-25 20:39:52,985 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-25 20:39:52,985 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-25 20:39:52,985 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [557796468] [2021-11-25 20:39:52,985 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-25 20:39:52,987 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-25 20:39:52,987 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-25 20:39:52,987 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-25 20:39:52,988 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-25 20:39:52,988 INFO L87 Difference]: Start difference. First operand 2874 states and 4052 transitions. Second operand has 3 states, 3 states have (on average 17.333333333333332) internal successors, (52), 3 states have internal predecessors, (52), 2 states have call successors, (14), 2 states have call predecessors, (14), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2021-11-25 20:39:53,530 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-25 20:39:53,530 INFO L93 Difference]: Finished difference Result 7950 states and 11159 transitions. [2021-11-25 20:39:53,530 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-25 20:39:53,530 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 17.333333333333332) internal successors, (52), 3 states have internal predecessors, (52), 2 states have call successors, (14), 2 states have call predecessors, (14), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) Word has length 142 [2021-11-25 20:39:53,531 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-25 20:39:53,569 INFO L225 Difference]: With dead ends: 7950 [2021-11-25 20:39:53,569 INFO L226 Difference]: Without dead ends: 5093 [2021-11-25 20:39:53,581 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-25 20:39:53,583 INFO L933 BasicCegarLoop]: 624 mSDtfsCounter, 451 mSDsluCounter, 548 mSDsCounter, 0 mSdLazyCounter, 192 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 451 SdHoareTripleChecker+Valid, 1090 SdHoareTripleChecker+Invalid, 194 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 192 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-11-25 20:39:53,586 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [451 Valid, 1090 Invalid, 194 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 192 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-11-25 20:39:53,593 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5093 states. [2021-11-25 20:39:53,878 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5093 to 5088. [2021-11-25 20:39:53,890 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5088 states, 3468 states have (on average 1.3543829296424452) internal successors, (4697), 3484 states have internal predecessors, (4697), 1135 states have call successors, (1135), 485 states have call predecessors, (1135), 484 states have return successors, (1288), 1134 states have call predecessors, (1288), 1134 states have call successors, (1288) [2021-11-25 20:39:53,922 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5088 states to 5088 states and 7120 transitions. [2021-11-25 20:39:53,924 INFO L78 Accepts]: Start accepts. Automaton has 5088 states and 7120 transitions. Word has length 142 [2021-11-25 20:39:53,924 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-25 20:39:53,924 INFO L470 AbstractCegarLoop]: Abstraction has 5088 states and 7120 transitions. [2021-11-25 20:39:53,925 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 17.333333333333332) internal successors, (52), 3 states have internal predecessors, (52), 2 states have call successors, (14), 2 states have call predecessors, (14), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2021-11-25 20:39:53,925 INFO L276 IsEmpty]: Start isEmpty. Operand 5088 states and 7120 transitions. [2021-11-25 20:39:53,928 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 155 [2021-11-25 20:39:53,929 INFO L506 BasicCegarLoop]: Found error trace [2021-11-25 20:39:53,929 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 9, 9, 9, 9, 9, 9, 9, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-25 20:39:53,929 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-25 20:39:53,929 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-25 20:39:53,930 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-25 20:39:53,930 INFO L85 PathProgramCache]: Analyzing trace with hash -992959712, now seen corresponding path program 1 times [2021-11-25 20:39:53,930 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-25 20:39:53,931 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [104453491] [2021-11-25 20:39:53,931 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-25 20:39:53,931 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-25 20:39:53,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-25 20:39:54,043 INFO L134 CoverageAnalysis]: Checked inductivity of 362 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 360 trivial. 0 not checked. [2021-11-25 20:39:54,043 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-25 20:39:54,044 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [104453491] [2021-11-25 20:39:54,044 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [104453491] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-25 20:39:54,044 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-25 20:39:54,044 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-25 20:39:54,044 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1702376991] [2021-11-25 20:39:54,044 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-25 20:39:54,045 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-25 20:39:54,045 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-25 20:39:54,045 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-25 20:39:54,046 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-25 20:39:54,046 INFO L87 Difference]: Start difference. First operand 5088 states and 7120 transitions. Second operand has 3 states, 3 states have (on average 17.666666666666668) internal successors, (53), 3 states have internal predecessors, (53), 2 states have call successors, (15), 2 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2021-11-25 20:39:54,734 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-25 20:39:54,734 INFO L93 Difference]: Finished difference Result 13138 states and 18347 transitions. [2021-11-25 20:39:54,734 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-25 20:39:54,735 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 17.666666666666668) internal successors, (53), 3 states have internal predecessors, (53), 2 states have call successors, (15), 2 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) Word has length 154 [2021-11-25 20:39:54,735 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-25 20:39:54,791 INFO L225 Difference]: With dead ends: 13138 [2021-11-25 20:39:54,792 INFO L226 Difference]: Without dead ends: 8067 [2021-11-25 20:39:54,810 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-25 20:39:54,811 INFO L933 BasicCegarLoop]: 689 mSDtfsCounter, 400 mSDsluCounter, 517 mSDsCounter, 0 mSdLazyCounter, 235 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 400 SdHoareTripleChecker+Valid, 1126 SdHoareTripleChecker+Invalid, 237 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 235 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-11-25 20:39:54,811 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [400 Valid, 1126 Invalid, 237 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 235 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-11-25 20:39:54,822 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8067 states. [2021-11-25 20:39:55,193 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8067 to 8060. [2021-11-25 20:39:55,223 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8060 states, 5570 states have (on average 1.3610412926391382) internal successors, (7581), 5604 states have internal predecessors, (7581), 1735 states have call successors, (1735), 755 states have call predecessors, (1735), 754 states have return successors, (1914), 1732 states have call predecessors, (1914), 1734 states have call successors, (1914) [2021-11-25 20:39:55,379 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8060 states to 8060 states and 11230 transitions. [2021-11-25 20:39:55,381 INFO L78 Accepts]: Start accepts. Automaton has 8060 states and 11230 transitions. Word has length 154 [2021-11-25 20:39:55,382 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-25 20:39:55,382 INFO L470 AbstractCegarLoop]: Abstraction has 8060 states and 11230 transitions. [2021-11-25 20:39:55,383 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 17.666666666666668) internal successors, (53), 3 states have internal predecessors, (53), 2 states have call successors, (15), 2 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2021-11-25 20:39:55,383 INFO L276 IsEmpty]: Start isEmpty. Operand 8060 states and 11230 transitions. [2021-11-25 20:39:55,400 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 187 [2021-11-25 20:39:55,400 INFO L506 BasicCegarLoop]: Found error trace [2021-11-25 20:39:55,401 INFO L514 BasicCegarLoop]: trace histogram [11, 11, 11, 11, 11, 11, 11, 11, 11, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-25 20:39:55,401 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-25 20:39:55,401 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-25 20:39:55,402 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-25 20:39:55,402 INFO L85 PathProgramCache]: Analyzing trace with hash -922992753, now seen corresponding path program 1 times [2021-11-25 20:39:55,402 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-25 20:39:55,402 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [440853421] [2021-11-25 20:39:55,402 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-25 20:39:55,403 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-25 20:39:55,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-25 20:39:55,527 INFO L134 CoverageAnalysis]: Checked inductivity of 564 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 554 trivial. 0 not checked. [2021-11-25 20:39:55,527 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-25 20:39:55,527 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [440853421] [2021-11-25 20:39:55,527 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [440853421] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-25 20:39:55,527 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-25 20:39:55,528 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-25 20:39:55,528 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1824284598] [2021-11-25 20:39:55,528 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-25 20:39:55,529 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-25 20:39:55,529 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-25 20:39:55,529 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-25 20:39:55,529 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-25 20:39:55,530 INFO L87 Difference]: Start difference. First operand 8060 states and 11230 transitions. Second operand has 3 states, 3 states have (on average 20.0) internal successors, (60), 3 states have internal predecessors, (60), 2 states have call successors, (17), 2 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 1 states have call successors, (16) [2021-11-25 20:39:56,029 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-25 20:39:56,030 INFO L93 Difference]: Finished difference Result 12181 states and 17215 transitions. [2021-11-25 20:39:56,030 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-25 20:39:56,030 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 20.0) internal successors, (60), 3 states have internal predecessors, (60), 2 states have call successors, (17), 2 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 1 states have call successors, (16) Word has length 186 [2021-11-25 20:39:56,031 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-25 20:39:56,103 INFO L225 Difference]: With dead ends: 12181 [2021-11-25 20:39:56,104 INFO L226 Difference]: Without dead ends: 8116 [2021-11-25 20:39:56,199 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-25 20:39:56,201 INFO L933 BasicCegarLoop]: 494 mSDtfsCounter, 4 mSDsluCounter, 571 mSDsCounter, 0 mSdLazyCounter, 170 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4 SdHoareTripleChecker+Valid, 982 SdHoareTripleChecker+Invalid, 171 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 170 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-25 20:39:56,201 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [4 Valid, 982 Invalid, 171 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 170 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-25 20:39:56,213 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8116 states. [2021-11-25 20:39:56,619 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8116 to 8116. [2021-11-25 20:39:56,633 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8116 states, 5612 states have (on average 1.3583392729864576) internal successors, (7623), 5660 states have internal predecessors, (7623), 1735 states have call successors, (1735), 755 states have call predecessors, (1735), 768 states have return successors, (1934), 1732 states have call predecessors, (1934), 1734 states have call successors, (1934) [2021-11-25 20:39:56,680 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8116 states to 8116 states and 11292 transitions. [2021-11-25 20:39:56,682 INFO L78 Accepts]: Start accepts. Automaton has 8116 states and 11292 transitions. Word has length 186 [2021-11-25 20:39:56,683 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-25 20:39:56,683 INFO L470 AbstractCegarLoop]: Abstraction has 8116 states and 11292 transitions. [2021-11-25 20:39:56,683 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 20.0) internal successors, (60), 3 states have internal predecessors, (60), 2 states have call successors, (17), 2 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 1 states have call successors, (16) [2021-11-25 20:39:56,684 INFO L276 IsEmpty]: Start isEmpty. Operand 8116 states and 11292 transitions. [2021-11-25 20:39:56,706 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 195 [2021-11-25 20:39:56,706 INFO L506 BasicCegarLoop]: Found error trace [2021-11-25 20:39:56,706 INFO L514 BasicCegarLoop]: trace histogram [12, 12, 12, 12, 12, 12, 12, 12, 12, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-25 20:39:56,707 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-25 20:39:56,707 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-25 20:39:56,707 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-25 20:39:56,708 INFO L85 PathProgramCache]: Analyzing trace with hash 2144810045, now seen corresponding path program 1 times [2021-11-25 20:39:56,708 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-25 20:39:56,708 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1429214635] [2021-11-25 20:39:56,708 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-25 20:39:56,708 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-25 20:39:56,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-25 20:39:56,927 INFO L134 CoverageAnalysis]: Checked inductivity of 670 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 660 trivial. 0 not checked. [2021-11-25 20:39:56,927 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-25 20:39:56,927 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1429214635] [2021-11-25 20:39:56,928 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1429214635] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-25 20:39:56,928 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-25 20:39:56,928 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-25 20:39:56,928 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [329049309] [2021-11-25 20:39:56,928 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-25 20:39:56,930 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-25 20:39:56,930 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-25 20:39:56,931 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-25 20:39:56,931 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-25 20:39:56,931 INFO L87 Difference]: Start difference. First operand 8116 states and 11292 transitions. Second operand has 3 states, 3 states have (on average 20.0) internal successors, (60), 3 states have internal predecessors, (60), 3 states have call successors, (18), 2 states have call predecessors, (18), 1 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) [2021-11-25 20:39:57,882 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-25 20:39:57,882 INFO L93 Difference]: Finished difference Result 20948 states and 29069 transitions. [2021-11-25 20:39:57,883 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-25 20:39:57,883 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 20.0) internal successors, (60), 3 states have internal predecessors, (60), 3 states have call successors, (18), 2 states have call predecessors, (18), 1 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) Word has length 194 [2021-11-25 20:39:57,883 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-25 20:39:57,947 INFO L225 Difference]: With dead ends: 20948 [2021-11-25 20:39:57,947 INFO L226 Difference]: Without dead ends: 12857 [2021-11-25 20:39:57,978 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-25 20:39:57,979 INFO L933 BasicCegarLoop]: 680 mSDtfsCounter, 506 mSDsluCounter, 524 mSDsCounter, 0 mSdLazyCounter, 231 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 506 SdHoareTripleChecker+Valid, 1125 SdHoareTripleChecker+Invalid, 253 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 231 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-11-25 20:39:57,980 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [506 Valid, 1125 Invalid, 253 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 231 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-11-25 20:39:57,998 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12857 states. [2021-11-25 20:39:58,487 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12857 to 12850. [2021-11-25 20:39:58,505 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12850 states, 8908 states have (on average 1.342052088010777) internal successors, (11955), 8982 states have internal predecessors, (11955), 2681 states have call successors, (2681), 1239 states have call predecessors, (2681), 1260 states have return successors, (2976), 2676 states have call predecessors, (2976), 2680 states have call successors, (2976) [2021-11-25 20:39:58,670 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12850 states to 12850 states and 17612 transitions. [2021-11-25 20:39:58,673 INFO L78 Accepts]: Start accepts. Automaton has 12850 states and 17612 transitions. Word has length 194 [2021-11-25 20:39:58,673 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-25 20:39:58,674 INFO L470 AbstractCegarLoop]: Abstraction has 12850 states and 17612 transitions. [2021-11-25 20:39:58,674 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 20.0) internal successors, (60), 3 states have internal predecessors, (60), 3 states have call successors, (18), 2 states have call predecessors, (18), 1 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) [2021-11-25 20:39:58,674 INFO L276 IsEmpty]: Start isEmpty. Operand 12850 states and 17612 transitions. [2021-11-25 20:39:58,693 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 188 [2021-11-25 20:39:58,693 INFO L506 BasicCegarLoop]: Found error trace [2021-11-25 20:39:58,693 INFO L514 BasicCegarLoop]: trace histogram [11, 11, 11, 11, 11, 11, 11, 11, 11, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-25 20:39:58,693 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-11-25 20:39:58,694 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-25 20:39:58,694 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-25 20:39:58,694 INFO L85 PathProgramCache]: Analyzing trace with hash 1454556747, now seen corresponding path program 1 times [2021-11-25 20:39:58,694 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-25 20:39:58,694 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [536365421] [2021-11-25 20:39:58,695 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-25 20:39:58,695 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-25 20:39:58,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-25 20:39:58,921 INFO L134 CoverageAnalysis]: Checked inductivity of 564 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 554 trivial. 0 not checked. [2021-11-25 20:39:58,921 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-25 20:39:58,921 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [536365421] [2021-11-25 20:39:58,921 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [536365421] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-25 20:39:58,921 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-25 20:39:58,922 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-25 20:39:58,922 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2022558845] [2021-11-25 20:39:58,922 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-25 20:39:58,922 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-25 20:39:58,923 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-25 20:39:58,923 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-25 20:39:58,923 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=36, Unknown=0, NotChecked=0, Total=56 [2021-11-25 20:39:58,924 INFO L87 Difference]: Start difference. First operand 12850 states and 17612 transitions. Second operand has 8 states, 8 states have (on average 7.625) internal successors, (61), 7 states have internal predecessors, (61), 4 states have call successors, (17), 4 states have call predecessors, (17), 2 states have return successors, (16), 4 states have call predecessors, (16), 3 states have call successors, (16) [2021-11-25 20:40:01,365 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-25 20:40:01,366 INFO L93 Difference]: Finished difference Result 26581 states and 36785 transitions. [2021-11-25 20:40:01,366 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-25 20:40:01,367 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 7.625) internal successors, (61), 7 states have internal predecessors, (61), 4 states have call successors, (17), 4 states have call predecessors, (17), 2 states have return successors, (16), 4 states have call predecessors, (16), 3 states have call successors, (16) Word has length 187 [2021-11-25 20:40:01,367 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-25 20:40:01,433 INFO L225 Difference]: With dead ends: 26581 [2021-11-25 20:40:01,434 INFO L226 Difference]: Without dead ends: 13756 [2021-11-25 20:40:01,480 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=71, Unknown=0, NotChecked=0, Total=110 [2021-11-25 20:40:01,481 INFO L933 BasicCegarLoop]: 485 mSDtfsCounter, 1173 mSDsluCounter, 1346 mSDsCounter, 0 mSdLazyCounter, 1326 mSolverCounterSat, 639 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1244 SdHoareTripleChecker+Valid, 1620 SdHoareTripleChecker+Invalid, 1965 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 639 IncrementalHoareTripleChecker+Valid, 1326 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.9s IncrementalHoareTripleChecker+Time [2021-11-25 20:40:01,481 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1244 Valid, 1620 Invalid, 1965 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [639 Valid, 1326 Invalid, 0 Unknown, 0 Unchecked, 1.9s Time] [2021-11-25 20:40:01,498 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13756 states. [2021-11-25 20:40:02,030 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13756 to 13162. [2021-11-25 20:40:02,049 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13162 states, 9082 states have (on average 1.3317551200176172) internal successors, (12095), 9150 states have internal predecessors, (12095), 2777 states have call successors, (2777), 1239 states have call predecessors, (2777), 1302 states have return successors, (2984), 2820 states have call predecessors, (2984), 2776 states have call successors, (2984) [2021-11-25 20:40:02,100 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13162 states to 13162 states and 17856 transitions. [2021-11-25 20:40:02,106 INFO L78 Accepts]: Start accepts. Automaton has 13162 states and 17856 transitions. Word has length 187 [2021-11-25 20:40:02,106 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-25 20:40:02,107 INFO L470 AbstractCegarLoop]: Abstraction has 13162 states and 17856 transitions. [2021-11-25 20:40:02,107 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 7.625) internal successors, (61), 7 states have internal predecessors, (61), 4 states have call successors, (17), 4 states have call predecessors, (17), 2 states have return successors, (16), 4 states have call predecessors, (16), 3 states have call successors, (16) [2021-11-25 20:40:02,107 INFO L276 IsEmpty]: Start isEmpty. Operand 13162 states and 17856 transitions. [2021-11-25 20:40:02,129 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 197 [2021-11-25 20:40:02,129 INFO L506 BasicCegarLoop]: Found error trace [2021-11-25 20:40:02,130 INFO L514 BasicCegarLoop]: trace histogram [12, 12, 12, 12, 12, 12, 12, 12, 12, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-25 20:40:02,130 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-11-25 20:40:02,130 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-25 20:40:02,131 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-25 20:40:02,131 INFO L85 PathProgramCache]: Analyzing trace with hash 1015874148, now seen corresponding path program 1 times [2021-11-25 20:40:02,131 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-25 20:40:02,131 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [617064248] [2021-11-25 20:40:02,132 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-25 20:40:02,132 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-25 20:40:02,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-25 20:40:02,593 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-25 20:40:02,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-25 20:40:02,991 INFO L133 FreeRefinementEngine]: Strategy SIFA_TAIPAN found a feasible trace [2021-11-25 20:40:02,991 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-11-25 20:40:02,993 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-25 20:40:02,997 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-11-25 20:40:03,000 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-25 20:40:03,004 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-25 20:40:03,315 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 25.11 08:40:03 BoogieIcfgContainer [2021-11-25 20:40:03,315 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-25 20:40:03,316 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-25 20:40:03,316 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-25 20:40:03,316 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-25 20:40:03,317 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 08:39:49" (3/4) ... [2021-11-25 20:40:03,319 INFO L131 WitnessPrinter]: Generating witness for reachability counterexample [2021-11-25 20:40:03,619 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_29ed8685-0354-479a-8fe4-7439563a3966/bin/utaipan-eEHZpOm5b7/witness.graphml [2021-11-25 20:40:03,620 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-25 20:40:03,620 INFO L158 Benchmark]: Toolchain (without parser) took 19265.27ms. Allocated memory was 92.3MB in the beginning and 1.5GB in the end (delta: 1.4GB). Free memory was 50.3MB in the beginning and 1.0GB in the end (delta: -990.2MB). Peak memory consumption was 376.3MB. Max. memory is 16.1GB. [2021-11-25 20:40:03,621 INFO L158 Benchmark]: CDTParser took 0.24ms. Allocated memory is still 92.3MB. Free memory was 45.4MB in the beginning and 45.4MB in the end (delta: 77.1kB). There was no memory consumed. Max. memory is 16.1GB. [2021-11-25 20:40:03,621 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1928.60ms. Allocated memory was 92.3MB in the beginning and 169.9MB in the end (delta: 77.6MB). Free memory was 50.1MB in the beginning and 103.2MB in the end (delta: -53.0MB). Peak memory consumption was 38.0MB. Max. memory is 16.1GB. [2021-11-25 20:40:03,622 INFO L158 Benchmark]: Boogie Procedure Inliner took 191.71ms. Allocated memory is still 169.9MB. Free memory was 103.2MB in the beginning and 92.2MB in the end (delta: 11.0MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-11-25 20:40:03,622 INFO L158 Benchmark]: Boogie Preprocessor took 197.93ms. Allocated memory is still 169.9MB. Free memory was 92.2MB in the beginning and 80.8MB in the end (delta: 11.4MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2021-11-25 20:40:03,623 INFO L158 Benchmark]: RCFGBuilder took 2744.00ms. Allocated memory was 169.9MB in the beginning and 255.9MB in the end (delta: 86.0MB). Free memory was 80.8MB in the beginning and 138.1MB in the end (delta: -57.3MB). Peak memory consumption was 83.8MB. Max. memory is 16.1GB. [2021-11-25 20:40:03,623 INFO L158 Benchmark]: TraceAbstraction took 13890.03ms. Allocated memory was 255.9MB in the beginning and 1.5GB in the end (delta: 1.2GB). Free memory was 138.1MB in the beginning and 1.1GB in the end (delta: -955.9MB). Peak memory consumption was 246.8MB. Max. memory is 16.1GB. [2021-11-25 20:40:03,625 INFO L158 Benchmark]: Witness Printer took 303.93ms. Allocated memory is still 1.5GB. Free memory was 1.1GB in the beginning and 1.0GB in the end (delta: 53.5MB). Peak memory consumption was 54.5MB. Max. memory is 16.1GB. [2021-11-25 20:40:03,627 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.24ms. Allocated memory is still 92.3MB. Free memory was 45.4MB in the beginning and 45.4MB in the end (delta: 77.1kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1928.60ms. Allocated memory was 92.3MB in the beginning and 169.9MB in the end (delta: 77.6MB). Free memory was 50.1MB in the beginning and 103.2MB in the end (delta: -53.0MB). Peak memory consumption was 38.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 191.71ms. Allocated memory is still 169.9MB. Free memory was 103.2MB in the beginning and 92.2MB in the end (delta: 11.0MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Preprocessor took 197.93ms. Allocated memory is still 169.9MB. Free memory was 92.2MB in the beginning and 80.8MB in the end (delta: 11.4MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * RCFGBuilder took 2744.00ms. Allocated memory was 169.9MB in the beginning and 255.9MB in the end (delta: 86.0MB). Free memory was 80.8MB in the beginning and 138.1MB in the end (delta: -57.3MB). Peak memory consumption was 83.8MB. Max. memory is 16.1GB. * TraceAbstraction took 13890.03ms. Allocated memory was 255.9MB in the beginning and 1.5GB in the end (delta: 1.2GB). Free memory was 138.1MB in the beginning and 1.1GB in the end (delta: -955.9MB). Peak memory consumption was 246.8MB. Max. memory is 16.1GB. * Witness Printer took 303.93ms. Allocated memory is still 1.5GB. Free memory was 1.1GB in the beginning and 1.0GB in the end (delta: 53.5MB). Peak memory consumption was 54.5MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - CounterExampleResult [Line: 6079]: a call to reach_error is reachable a call to reach_error is reachable We found a FailurePath: [L6102] int ldv_state_variable_3 ; [L6103] int LDV_IN_INTERRUPT = 1; [L6104] int ldv_state_variable_2 ; [L6105] struct net_device *lapbeth_netdev_ops_group1 ; [L6106] int ref_cnt ; [L6107] struct sk_buff *lapbeth_callbacks_group0 ; [L6108] struct net_device *lapbeth_callbacks_group1 ; [L6109] int ldv_state_variable_1 ; [L6110] int ldv_state_variable_4 ; [L6111] int ldv_state_variable_0 ; [L6683-L6684] static u8 const bcast_addr[6U] = { 255U, 255U, 255U, 255U, 255U, 255U}; [L6685] static struct list_head lapbeth_devices = {& lapbeth_devices, & lapbeth_devices}; [L6968-L6969] static struct lapb_register_struct const lapbeth_callbacks = {& lapbeth_connected, & lapbeth_connected, & lapbeth_disconnected, & lapbeth_disconnected, & lapbeth_data_indication, & lapbeth_data_transmit}; [L6997-L7000] static struct net_device_ops const lapbeth_netdev_ops = {0, 0, & lapbeth_open, & lapbeth_close, & lapbeth_xmit, 0, 0, 0, & lapbeth_set_mac_address, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L7117] static struct packet_type lapbeth_packet_type = {96U, 0, & lapbeth_rcv, 0, 0, {0, 0}}; [L7118] static struct notifier_block lapbeth_dev_notifier = {& lapbeth_device_event, 0, 0}; [L7119-L7128] static char const banner[37U] = { '\016', 'L', 'A', 'P', 'B', ' ', 'E', 't', 'h', 'e', 'r', 'n', 'e', 't', ' ', 'd', 'r', 'i', 'v', 'e', 'r', ' ', 'v', 'e', 'r', 's', 'i', 'o', 'n', ' ', '0', '.', '0', '2', '\n', '\000'}; [L7169] int ldv_retval_2 ; [L7170] int ldv_retval_0 ; [L7172] int ldv_retval_1 ; [L7607] Element set_impl[15] ; [L7608] int last_index = 0; [L7742] Set LDV_SKBS ; [L7198] int ldvarg1 ; [L7199] int tmp ; [L7200] int ldvarg3 ; [L7201] int tmp___0 ; [L7202] int ldvarg0 ; [L7203] int tmp___1 ; [L7204] int ldvarg2 ; [L7205] int tmp___2 ; [L7206] struct notifier_block *ldvarg4 ; [L7207] void *tmp___3 ; [L7208] void *ldvarg5 ; [L7209] void *tmp___4 ; [L7210] unsigned long ldvarg6 ; [L7211] unsigned long tmp___5 ; [L7212] struct sk_buff *ldvarg8 ; [L7213] void *tmp___6 ; [L7214] void *ldvarg7 ; [L7215] void *tmp___7 ; [L7216] struct packet_type *ldvarg11 ; [L7217] void *tmp___8 ; [L7218] struct sk_buff *ldvarg10 ; [L7219] void *tmp___9 ; [L7220] struct net_device *ldvarg12 ; [L7221] void *tmp___10 ; [L7222] struct net_device *ldvarg9 ; [L7223] void *tmp___11 ; [L7224] int tmp___12 ; [L7225] int tmp___13 ; [L7226] int tmp___14 ; [L7227] int tmp___15 ; [L7228] int tmp___16 ; [L7229] int tmp___17 ; [L7231] tmp = __VERIFIER_nondet_int() [L7232] ldvarg1 = tmp [L7233] tmp___0 = __VERIFIER_nondet_int() [L7234] ldvarg3 = tmp___0 [L7235] tmp___1 = __VERIFIER_nondet_int() [L7236] ldvarg0 = tmp___1 [L7237] tmp___2 = __VERIFIER_nondet_int() [L7238] ldvarg2 = tmp___2 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=0, ldvarg1=-2, ldvarg2=0, ldvarg3=0, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=0, tmp___1=0, tmp___2=0] [L7239] CALL, EXPR ldv_successful_zalloc(24UL) VAL [\old(__size)=24, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=24, __size=24, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-3:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=24, __size=24, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-3:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-3:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=24, __size=24, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-3:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-3:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; [L7239] RET, EXPR ldv_successful_zalloc(24UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_successful_zalloc(24UL)={-3:0}, ldvarg0=0, ldvarg1=-2, ldvarg2=0, ldvarg3=0, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=0, tmp___1=0, tmp___2=0] [L7239] tmp___3 = ldv_successful_zalloc(24UL) [L7240] ldvarg4 = (struct notifier_block *)tmp___3 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=0, ldvarg1=-2, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=0, tmp___1=0, tmp___2=0, tmp___3={-3:0}] [L7241] CALL, EXPR ldv_successful_zalloc(1UL) VAL [\old(__size)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=1, __size=1, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-4:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=1, __size=1, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-4:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-4:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=1, __size=1, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-4:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-4:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; [L7241] RET, EXPR ldv_successful_zalloc(1UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_successful_zalloc(1UL)={-4:0}, ldvarg0=0, ldvarg1=-2, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=0, tmp___1=0, tmp___2=0, tmp___3={-3:0}] [L7241] tmp___4 = ldv_successful_zalloc(1UL) [L7242] ldvarg5 = tmp___4 [L7243] tmp___5 = __VERIFIER_nondet_ulong() [L7244] ldvarg6 = tmp___5 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=0, ldvarg1=-2, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=0, tmp___1=0, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3] [L7245] CALL, EXPR ldv_successful_zalloc(232UL) VAL [\old(__size)=232, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-5:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-5:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-5:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-5:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-5:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; [L7245] RET, EXPR ldv_successful_zalloc(232UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_successful_zalloc(232UL)={-5:0}, ldvarg0=0, ldvarg1=-2, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=0, tmp___1=0, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3] [L7245] tmp___6 = ldv_successful_zalloc(232UL) [L7246] ldvarg8 = (struct sk_buff *)tmp___6 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=0, ldvarg1=-2, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg8={-5:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=0, tmp___1=0, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}] [L7247] CALL, EXPR ldv_successful_zalloc(1UL) VAL [\old(__size)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=1, __size=1, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-6:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=1, __size=1, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-6:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-6:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=1, __size=1, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-6:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-6:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; [L7247] RET, EXPR ldv_successful_zalloc(1UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_successful_zalloc(1UL)={-6:0}, ldvarg0=0, ldvarg1=-2, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg8={-5:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=0, tmp___1=0, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}] [L7247] tmp___7 = ldv_successful_zalloc(1UL) [L7248] ldvarg7 = tmp___7 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=0, ldvarg1=-2, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=0, tmp___1=0, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}] [L7249] CALL, EXPR ldv_successful_zalloc(56UL) VAL [\old(__size)=56, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=56, __size=56, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-7:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=56, __size=56, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-7:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-7:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=56, __size=56, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-7:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-7:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; [L7249] RET, EXPR ldv_successful_zalloc(56UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_successful_zalloc(56UL)={-7:0}, ldvarg0=0, ldvarg1=-2, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=0, tmp___1=0, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}] [L7249] tmp___8 = ldv_successful_zalloc(56UL) [L7250] ldvarg11 = (struct packet_type *)tmp___8 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=0, ldvarg1=-2, ldvarg11={-7:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=0, tmp___1=0, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}] [L7251] CALL, EXPR ldv_successful_zalloc(232UL) VAL [\old(__size)=232, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-8:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-8:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-8:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-8:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-8:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; [L7251] RET, EXPR ldv_successful_zalloc(232UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_successful_zalloc(232UL)={-8:0}, ldvarg0=0, ldvarg1=-2, ldvarg11={-7:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=0, tmp___1=0, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}] [L7251] tmp___9 = ldv_successful_zalloc(232UL) [L7252] ldvarg10 = (struct sk_buff *)tmp___9 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=0, ldvarg1=-2, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=0, tmp___1=0, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7253] CALL, EXPR ldv_successful_zalloc(3264UL) VAL [\old(__size)=3264, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-9:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-9:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-9:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-9:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-9:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; [L7253] RET, EXPR ldv_successful_zalloc(3264UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_successful_zalloc(3264UL)={-9:0}, ldvarg0=0, ldvarg1=-2, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=0, tmp___1=0, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7253] tmp___10 = ldv_successful_zalloc(3264UL) [L7254] ldvarg12 = (struct net_device *)tmp___10 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=0, ldvarg1=-2, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=0, tmp___1=0, tmp___10={-9:0}, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7255] CALL, EXPR ldv_successful_zalloc(3264UL) VAL [\old(__size)=3264, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-10:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-10:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-10:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-10:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, p={-10:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; [L7255] RET, EXPR ldv_successful_zalloc(3264UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_successful_zalloc(3264UL)={-10:0}, ldvarg0=0, ldvarg1=-2, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=0, tmp___1=0, tmp___10={-9:0}, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7255] tmp___11 = ldv_successful_zalloc(3264UL) [L7256] ldvarg9 = (struct net_device *)tmp___11 [L7257] CALL ldv_initialize() [L7761] CALL ldv_set_init(LDV_SKBS) [L7613] set = set_impl [L7614] last_index = 0 [L7761] RET ldv_set_init(LDV_SKBS) [L7257] RET ldv_initialize() [L7258] ldv_state_variable_4 = 0 [L7259] ldv_state_variable_1 = 0 [L7260] ref_cnt = 0 [L7261] ldv_state_variable_0 = 1 [L7262] ldv_state_variable_3 = 0 [L7263] ldv_state_variable_2 = 0 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=0, ldvarg1=-2, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=0, tmp___1=0, tmp___10={-9:0}, tmp___11={-10:0}, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7265] tmp___12 = __VERIFIER_nondet_int() [L7267] case 0: [L7354] case 1: [L7372] case 2: VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=0, ldvarg1=-2, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=0, tmp___1=0, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=2, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7373] COND TRUE ldv_state_variable_0 != 0 [L7374] tmp___15 = __VERIFIER_nondet_int() [L7376] case 0: [L7384] case 1: VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0=0, ldvarg1=-2, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=0, tmp___1=0, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=2, tmp___15=1, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7385] COND TRUE ldv_state_variable_0 == 1 [L7386] CALL, EXPR lapbeth_init_driver() [L7132] FCALL dev_add_pack(& lapbeth_packet_type) [L7133] CALL register_netdevice_notifier(& lapbeth_dev_notifier) [L7932] return __VERIFIER_nondet_int(); [L7133] RET register_netdevice_notifier(& lapbeth_dev_notifier) [L7135] return (0); [L7386] RET, EXPR lapbeth_init_driver() [L7386] ldv_retval_0 = lapbeth_init_driver() [L7387] COND TRUE ldv_retval_0 == 0 [L7388] ldv_state_variable_0 = 3 [L7389] ldv_state_variable_2 = 1 [L7390] ldv_state_variable_3 = 1 [L7391] CALL ldv_net_device_ops_3() [L7177] void *tmp ; VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L7179] CALL, EXPR ldv_successful_zalloc(3264UL) VAL [\old(__size)=3264, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-11:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-11:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, p={-11:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-11:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, p={-11:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; [L7179] RET, EXPR ldv_successful_zalloc(3264UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={0:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_successful_zalloc(3264UL)={-11:0}, ref_cnt=0, set_impl={29:0}] [L7179] tmp = ldv_successful_zalloc(3264UL) [L7180] lapbeth_netdev_ops_group1 = (struct net_device *)tmp [L7391] RET ldv_net_device_ops_3() [L7392] ldv_state_variable_1 = 1 [L7393] ldv_state_variable_4 = 1 [L7394] CALL ldv_initialize_lapb_register_struct_4() [L7186] void *tmp ; [L7187] void *tmp___0 ; VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L7189] CALL, EXPR ldv_successful_zalloc(3264UL) VAL [\old(__size)=3264, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-12:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-12:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, p={-12:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=3264, __size=3264, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-12:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, p={-12:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; [L7189] RET, EXPR ldv_successful_zalloc(3264UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={0:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_successful_zalloc(3264UL)={-12:0}, ref_cnt=0, set_impl={29:0}] [L7189] tmp = ldv_successful_zalloc(3264UL) [L7190] lapbeth_callbacks_group1 = (struct net_device *)tmp VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}, tmp={-12:0}] [L7191] CALL, EXPR ldv_successful_zalloc(232UL) VAL [\old(__size)=232, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-13:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-13:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, p={-13:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=232, __size=232, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={-13:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, p={-13:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; [L7191] RET, EXPR ldv_successful_zalloc(232UL) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={0:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_successful_zalloc(232UL)={-13:0}, ref_cnt=0, set_impl={29:0}, tmp={-12:0}] [L7191] tmp___0 = ldv_successful_zalloc(232UL) [L7192] lapbeth_callbacks_group0 = (struct sk_buff *)tmp___0 [L7394] RET ldv_initialize_lapb_register_struct_4() [L7397] COND FALSE !(ldv_retval_0 != 0) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=0, ldvarg1=-2, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=0, tmp___1=0, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=2, tmp___15=1, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7265] tmp___12 = __VERIFIER_nondet_int() [L7267] case 0: VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=0, ldvarg1=-2, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=0, tmp___1=0, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=0, tmp___15=1, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7268] COND TRUE ldv_state_variable_4 != 0 [L7269] tmp___13 = __VERIFIER_nondet_int() [L7271] case 0: [L7283] case 1: [L7295] case 2: [L7303] case 3: VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=0, ldvarg1=-2, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=0, tmp___1=0, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=0, tmp___13=3, tmp___15=1, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7304] COND TRUE ldv_state_variable_4 == 1 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=0, ldvarg1=-2, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=0, tmp___1=0, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=0, tmp___13=3, tmp___15=1, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7305] CALL lapbeth_connected(lapbeth_callbacks_group1, ldvarg1) VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6916] unsigned char *ptr ; [L6917] struct sk_buff *skb ; [L6918] struct sk_buff *tmp ; VAL [\old(last_index)=0, \old(reason)=-2, banner={28:0}, bcast_addr={22:0}, dev={-12:0}, dev={-12:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, reason=-2, ref_cnt=0, set_impl={29:0}] [L6920] CALL, EXPR ldv_dev_alloc_skb_18(1U) VAL [\old(last_index)=0, \old(length)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L7584] struct sk_buff *tmp ; VAL [\old(last_index)=0, \old(length)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, length=1, ref_cnt=0, set_impl={29:0}] [L7586] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L7745] void *skb ; [L7746] void *tmp___7 ; VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L7748] CALL, EXPR ldv_successful_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(__size)=248, \old(last_index)=0, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6021] EXPR, FCALL calloc(1UL, __size) VAL [\old(__size)=248, \old(last_index)=0, __size=248, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={18446744073709551616:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6021] void *p = calloc(1UL, __size); VAL [\old(__size)=248, \old(last_index)=0, __size=248, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={18446744073709551616:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, p={18446744073709551616:0}, ref_cnt=0, set_impl={29:0}] [L6022] CALL assume_abort_if_not(p != (void *)0) VAL [\old(cond)=1, \old(last_index)=0, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6018] COND FALSE !(!cond) [L6022] RET assume_abort_if_not(p != (void *)0) VAL [\old(__size)=248, \old(last_index)=0, __size=248, banner={28:0}, bcast_addr={22:0}, calloc(1UL, __size)={18446744073709551616:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, p={18446744073709551616:0}, ref_cnt=0, set_impl={29:0}] [L6023] return p; [L7748] RET, EXPR ldv_successful_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_successful_zalloc(sizeof(struct sk_buff___0 ))={18446744073709551616:0}, ref_cnt=0, set_impl={29:0}] [L7748] tmp___7 = ldv_successful_zalloc(sizeof(struct sk_buff___0 )) [L7749] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}, skb={18446744073709551616:0}, tmp___7={18446744073709551616:0}] [L7750] COND FALSE !(! skb) [L7753] CALL ldv_set_add(LDV_SKBS, skb) [L7621] int i ; [L7623] i = 0 VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, e={18446744073709551616:0}, e={18446744073709551616:0}, i=0, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set={0:0}, set={0:0}, set_impl={29:0}] [L7624] COND TRUE 1 VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, e={18446744073709551616:0}, e={18446744073709551616:0}, i=0, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set={0:0}, set={0:0}, set_impl={29:0}] [L7625] COND FALSE !(i < last_index) VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, e={18446744073709551616:0}, e={18446744073709551616:0}, i=0, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set={0:0}, set={0:0}, set_impl={29:0}] [L7635] COND TRUE last_index < 15 [L7636] set_impl[last_index] = e [L7637] last_index = last_index + 1 VAL [\old(last_index)=0, banner={28:0}, bcast_addr={22:0}, e={18446744073709551616:0}, e={18446744073709551616:0}, i=0, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set={0:0}, set={0:0}, set_impl={29:0}] [L7753] RET ldv_set_add(LDV_SKBS, skb) [L7754] return (skb); VAL [\old(last_index)=0, \result={18446744073709551616:0}, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}, skb={18446744073709551616:0}, tmp___7={18446744073709551616:0}] [L7586] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, \old(length)=1, banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_skb_alloc()={18446744073709551616:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, length=1, ref_cnt=0, set_impl={29:0}] [L7586] tmp = ldv_skb_alloc() [L7587] return (tmp); [L6920] RET, EXPR ldv_dev_alloc_skb_18(1U) VAL [\old(last_index)=0, \old(reason)=-2, banner={28:0}, bcast_addr={22:0}, dev={-12:0}, dev={-12:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, ldv_dev_alloc_skb_18(1U)={18446744073709551616:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, reason=-2, ref_cnt=0, set_impl={29:0}] [L6920] tmp = ldv_dev_alloc_skb_18(1U) [L6921] skb = tmp VAL [\old(last_index)=0, \old(reason)=-2, banner={28:0}, bcast_addr={22:0}, dev={-12:0}, dev={-12:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, reason=-2, ref_cnt=0, set_impl={29:0}, skb={18446744073709551616:0}, tmp={18446744073709551616:0}] [L6922] COND TRUE (unsigned long )skb == (unsigned long )((struct sk_buff *)0) [L7305] RET lapbeth_connected(lapbeth_callbacks_group1, ldvarg1) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=0, ldvarg1=-2, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=0, tmp___1=0, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=0, tmp___13=3, tmp___15=1, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7306] ldv_state_variable_4 = 1 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=0, ldvarg1=-2, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=0, tmp___1=0, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=0, tmp___13=3, tmp___15=1, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7309] COND FALSE !(ldv_state_variable_4 == 2) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=0, ldvarg1=-2, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=0, tmp___1=0, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=0, tmp___13=3, tmp___15=1, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7265] tmp___12 = __VERIFIER_nondet_int() [L7267] case 0: [L7354] case 1: [L7372] case 2: VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=0, ldvarg1=-2, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=0, tmp___1=0, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=2, tmp___13=3, tmp___15=1, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7373] COND TRUE ldv_state_variable_0 != 0 [L7374] tmp___15 = __VERIFIER_nondet_int() [L7376] case 0: VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=0, ldvarg1=-2, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=0, tmp___1=0, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=2, tmp___13=3, tmp___15=0, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7377] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L7378] CALL lapbeth_cleanup_driver() [L7140] struct lapbethdev *lapbeth ; [L7141] struct list_head *entry ; [L7142] struct list_head *tmp ; [L7143] struct list_head const *__mptr ; [L7145] FCALL dev_remove_pack(& lapbeth_packet_type) [L7146] CALL unregister_netdevice_notifier(& lapbeth_dev_notifier) [L7963] return __VERIFIER_nondet_int(); [L7146] RET unregister_netdevice_notifier(& lapbeth_dev_notifier) [L7147] FCALL rtnl_lock() [L7148] EXPR lapbeth_devices.next [L7148] entry = lapbeth_devices.next [L7149] EXPR entry->next [L7149] tmp = entry->next [L7159] COND FALSE !((unsigned long )entry != (unsigned long )(& lapbeth_devices)) [L7163] FCALL rtnl_unlock() [L7378] RET lapbeth_cleanup_driver() [L7379] ldv_state_variable_0 = 2 VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0=0, ldvarg1=-2, ldvarg10={-8:0}, ldvarg11={-7:0}, ldvarg12={-9:0}, ldvarg2=0, ldvarg3=0, ldvarg4={-3:0}, ldvarg5={-4:0}, ldvarg6=3, ldvarg7={-6:0}, ldvarg8={-5:0}, ldvarg9={-10:0}, ref_cnt=0, set_impl={29:0}, tmp=-2, tmp___0=0, tmp___1=0, tmp___10={-9:0}, tmp___11={-10:0}, tmp___12=2, tmp___13=3, tmp___15=0, tmp___2=0, tmp___3={-3:0}, tmp___4={-4:0}, tmp___5=3, tmp___6={-5:0}, tmp___7={-6:0}, tmp___8={-7:0}, tmp___9={-8:0}] [L7507] CALL ldv_check_final_state() [L7812] int tmp___7 ; [L7814] CALL, EXPR ldv_set_is_empty(LDV_SKBS) [L7703] return (last_index == 0); [L7814] RET, EXPR ldv_set_is_empty(LDV_SKBS) [L7814] tmp___7 = ldv_set_is_empty(LDV_SKBS) [L7815] COND FALSE !(\read(tmp___7)) VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}, tmp___7=0] [L7817] CALL ldv_error() VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] [L6079] reach_error() VAL [banner={28:0}, bcast_addr={22:0}, lapbeth_callbacks={24:0}, lapbeth_callbacks_group0={-13:0}, lapbeth_callbacks_group1={-12:0}, lapbeth_dev_notifier={27:0}, lapbeth_devices={23:0}, lapbeth_netdev_ops={25:0}, lapbeth_netdev_ops_group1={-11:0}, lapbeth_packet_type={26:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, set_impl={29:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 36 procedures, 425 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 13.5s, OverallIterations: 9, TraceHistogramMax: 12, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 7.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 4186 SdHoareTripleChecker+Valid, 4.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 4115 mSDsluCounter, 9768 SdHoareTripleChecker+Invalid, 3.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 5873 mSDsCounter, 678 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2796 IncrementalHoareTripleChecker+Invalid, 3474 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 678 mSolverCounterUnsat, 4749 mSDtfsCounter, 2796 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 37 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=13162occurred in iteration=8, InterpolantAutomatonStates: 31, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 3.2s AutomataMinimizationTime, 8 MinimizatonAttempts, 626 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 0.8s SatisfiabilityAnalysisTime, 0.9s InterpolantComputationTime, 1422 NumberOfCodeBlocks, 1422 NumberOfCodeBlocksAsserted, 9 NumberOfCheckSat, 1218 ConstructedInterpolants, 0 QuantifiedInterpolants, 1472 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 8 InterpolantComputations, 8 PerfectInterpolantSequences, 3288/3288 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! [2021-11-25 20:40:03,674 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_29ed8685-0354-479a-8fe4-7439563a3966/bin/utaipan-eEHZpOm5b7/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Writing human readable error path to file UltimateCounterExample.errorpath Result: FALSE