./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_ppp.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8393723b Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a8a507d3-ac84-4807-96eb-039b79995062/bin/utaipan-I9t0OCRTmS/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a8a507d3-ac84-4807-96eb-039b79995062/bin/utaipan-I9t0OCRTmS/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a8a507d3-ac84-4807-96eb-039b79995062/bin/utaipan-I9t0OCRTmS/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a8a507d3-ac84-4807-96eb-039b79995062/bin/utaipan-I9t0OCRTmS/config/TaipanReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_ppp.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a8a507d3-ac84-4807-96eb-039b79995062/bin/utaipan-I9t0OCRTmS/config/svcomp-Reach-64bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a8a507d3-ac84-4807-96eb-039b79995062/bin/utaipan-I9t0OCRTmS --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 790ee47547867d006f1299e2cf5c9d6d26b057091574ae3950813e98f75c3c5e --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-8393723 [2022-11-19 08:31:55,747 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-19 08:31:55,750 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-19 08:31:55,788 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-19 08:31:55,790 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-19 08:31:55,793 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-19 08:31:55,796 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-19 08:31:55,799 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-19 08:31:55,804 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-19 08:31:55,806 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-19 08:31:55,808 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-19 08:31:55,810 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-19 08:31:55,811 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-19 08:31:55,814 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-19 08:31:55,816 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-19 08:31:55,821 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-19 08:31:55,823 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-19 08:31:55,829 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-19 08:31:55,830 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-19 08:31:55,832 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-19 08:31:55,836 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-19 08:31:55,837 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-19 08:31:55,838 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-19 08:31:55,840 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-19 08:31:55,844 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-19 08:31:55,850 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-19 08:31:55,850 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-19 08:31:55,851 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-19 08:31:55,853 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-19 08:31:55,854 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-19 08:31:55,854 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-19 08:31:55,855 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-19 08:31:55,856 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-19 08:31:55,857 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-19 08:31:55,859 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-19 08:31:55,861 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-19 08:31:55,862 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-19 08:31:55,862 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-19 08:31:55,862 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-19 08:31:55,863 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-19 08:31:55,864 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-19 08:31:55,865 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a8a507d3-ac84-4807-96eb-039b79995062/bin/utaipan-I9t0OCRTmS/config/svcomp-Reach-64bit-Taipan_Default.epf [2022-11-19 08:31:55,899 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-19 08:31:55,899 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-19 08:31:55,900 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-19 08:31:55,900 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-19 08:31:55,901 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-19 08:31:55,901 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-19 08:31:55,901 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-19 08:31:55,901 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-19 08:31:55,902 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-19 08:31:55,902 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-19 08:31:55,903 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-19 08:31:55,903 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-19 08:31:55,903 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-19 08:31:55,904 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-19 08:31:55,904 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-19 08:31:55,904 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-19 08:31:55,904 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-19 08:31:55,904 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-19 08:31:55,905 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-19 08:31:55,905 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-19 08:31:55,906 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-19 08:31:55,906 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-19 08:31:55,906 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-19 08:31:55,906 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-19 08:31:55,906 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-19 08:31:55,907 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-19 08:31:55,907 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-19 08:31:55,908 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-19 08:31:55,909 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-19 08:31:55,909 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-19 08:31:55,909 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-19 08:31:55,910 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-19 08:31:55,910 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-19 08:31:55,910 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-19 08:31:55,910 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-19 08:31:55,910 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-19 08:31:55,911 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-19 08:31:55,911 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-19 08:31:55,911 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a8a507d3-ac84-4807-96eb-039b79995062/bin/utaipan-I9t0OCRTmS/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a8a507d3-ac84-4807-96eb-039b79995062/bin/utaipan-I9t0OCRTmS Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 790ee47547867d006f1299e2cf5c9d6d26b057091574ae3950813e98f75c3c5e [2022-11-19 08:31:56,189 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-19 08:31:56,210 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-19 08:31:56,213 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-19 08:31:56,214 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-19 08:31:56,215 INFO L275 PluginConnector]: CDTParser initialized [2022-11-19 08:31:56,216 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a8a507d3-ac84-4807-96eb-039b79995062/bin/utaipan-I9t0OCRTmS/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_ppp.ko-entry_point.cil.out.i [2022-11-19 08:31:56,296 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a8a507d3-ac84-4807-96eb-039b79995062/bin/utaipan-I9t0OCRTmS/data/69f5b6eb1/2fe15820324d4c3482f144aed48f0823/FLAGda3adf7cb [2022-11-19 08:31:57,102 INFO L306 CDTParser]: Found 1 translation units. [2022-11-19 08:31:57,103 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a8a507d3-ac84-4807-96eb-039b79995062/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_ppp.ko-entry_point.cil.out.i [2022-11-19 08:31:57,144 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a8a507d3-ac84-4807-96eb-039b79995062/bin/utaipan-I9t0OCRTmS/data/69f5b6eb1/2fe15820324d4c3482f144aed48f0823/FLAGda3adf7cb [2022-11-19 08:31:57,203 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a8a507d3-ac84-4807-96eb-039b79995062/bin/utaipan-I9t0OCRTmS/data/69f5b6eb1/2fe15820324d4c3482f144aed48f0823 [2022-11-19 08:31:57,207 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-19 08:31:57,209 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-19 08:31:57,214 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-19 08:31:57,214 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-19 08:31:57,218 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-19 08:31:57,219 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 08:31:57" (1/1) ... [2022-11-19 08:31:57,221 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@65f5f587 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:31:57, skipping insertion in model container [2022-11-19 08:31:57,221 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 08:31:57" (1/1) ... [2022-11-19 08:31:57,228 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-19 08:31:57,355 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-19 08:31:58,262 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a8a507d3-ac84-4807-96eb-039b79995062/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_ppp.ko-entry_point.cil.out.i[152029,152042] [2022-11-19 08:31:58,577 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-19 08:31:58,598 INFO L203 MainTranslator]: Completed pre-run [2022-11-19 08:31:58,790 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a8a507d3-ac84-4807-96eb-039b79995062/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_ppp.ko-entry_point.cil.out.i[152029,152042] [2022-11-19 08:31:58,931 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-19 08:31:58,993 INFO L208 MainTranslator]: Completed translation [2022-11-19 08:31:58,993 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:31:58 WrapperNode [2022-11-19 08:31:58,993 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-19 08:31:58,994 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-19 08:31:58,995 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-19 08:31:58,995 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-19 08:31:59,002 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:31:58" (1/1) ... [2022-11-19 08:31:59,058 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:31:58" (1/1) ... [2022-11-19 08:31:59,170 INFO L138 Inliner]: procedures = 134, calls = 555, calls flagged for inlining = 53, calls inlined = 50, statements flattened = 1647 [2022-11-19 08:31:59,170 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-19 08:31:59,171 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-19 08:31:59,171 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-19 08:31:59,171 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-19 08:31:59,180 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:31:58" (1/1) ... [2022-11-19 08:31:59,180 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:31:58" (1/1) ... [2022-11-19 08:31:59,206 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:31:58" (1/1) ... [2022-11-19 08:31:59,207 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:31:58" (1/1) ... [2022-11-19 08:31:59,286 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:31:58" (1/1) ... [2022-11-19 08:31:59,305 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:31:58" (1/1) ... [2022-11-19 08:31:59,312 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:31:58" (1/1) ... [2022-11-19 08:31:59,319 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:31:58" (1/1) ... [2022-11-19 08:31:59,331 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-19 08:31:59,332 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-19 08:31:59,332 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-19 08:31:59,332 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-19 08:31:59,333 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:31:58" (1/1) ... [2022-11-19 08:31:59,339 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-19 08:31:59,349 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a8a507d3-ac84-4807-96eb-039b79995062/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 08:31:59,362 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a8a507d3-ac84-4807-96eb-039b79995062/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-19 08:31:59,396 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a8a507d3-ac84-4807-96eb-039b79995062/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-19 08:31:59,422 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_hard_header [2022-11-19 08:31:59,422 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_hard_header [2022-11-19 08:31:59,422 INFO L130 BoogieDeclarations]: Found specification of procedure __raw_spin_lock_init [2022-11-19 08:31:59,422 INFO L138 BoogieDeclarations]: Found implementation of procedure __raw_spin_lock_init [2022-11-19 08:31:59,423 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_rx [2022-11-19 08:31:59,423 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_rx [2022-11-19 08:31:59,423 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2022-11-19 08:31:59,423 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_type_trans [2022-11-19 08:31:59,423 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_type_trans [2022-11-19 08:31:59,423 INFO L130 BoogieDeclarations]: Found specification of procedure activate_pending_timer_1 [2022-11-19 08:31:59,424 INFO L138 BoogieDeclarations]: Found implementation of procedure activate_pending_timer_1 [2022-11-19 08:31:59,424 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-11-19 08:31:59,424 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-11-19 08:31:59,424 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-11-19 08:31:59,424 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-11-19 08:31:59,424 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-11-19 08:31:59,424 INFO L130 BoogieDeclarations]: Found specification of procedure dev_to_hdlc [2022-11-19 08:31:59,425 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_to_hdlc [2022-11-19 08:31:59,425 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2022-11-19 08:31:59,425 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2022-11-19 08:31:59,425 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_disconnect_3 [2022-11-19 08:31:59,425 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_disconnect_3 [2022-11-19 08:31:59,425 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-11-19 08:31:59,426 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-11-19 08:31:59,426 INFO L130 BoogieDeclarations]: Found specification of procedure netif_dormant_on [2022-11-19 08:31:59,426 INFO L138 BoogieDeclarations]: Found implementation of procedure netif_dormant_on [2022-11-19 08:31:59,426 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2022-11-19 08:31:59,426 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2022-11-19 08:31:59,427 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-11-19 08:31:59,427 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-11-19 08:31:59,427 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-11-19 08:31:59,427 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-11-19 08:31:59,428 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-11-19 08:31:59,428 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_tx_flush [2022-11-19 08:31:59,429 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_tx_flush [2022-11-19 08:31:59,429 INFO L130 BoogieDeclarations]: Found specification of procedure skb_pull [2022-11-19 08:31:59,430 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_pull [2022-11-19 08:31:59,430 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-11-19 08:31:59,430 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-11-19 08:31:59,430 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-11-19 08:31:59,430 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-11-19 08:31:59,430 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-11-19 08:31:59,431 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2022-11-19 08:31:59,431 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2022-11-19 08:31:59,431 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-19 08:31:59,431 INFO L130 BoogieDeclarations]: Found specification of procedure get_ppp [2022-11-19 08:31:59,431 INFO L138 BoogieDeclarations]: Found implementation of procedure get_ppp [2022-11-19 08:31:59,432 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-19 08:31:59,432 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-11-19 08:31:59,433 INFO L130 BoogieDeclarations]: Found specification of procedure get_proto [2022-11-19 08:31:59,433 INFO L138 BoogieDeclarations]: Found implementation of procedure get_proto [2022-11-19 08:31:59,434 INFO L130 BoogieDeclarations]: Found specification of procedure memcmp [2022-11-19 08:31:59,435 INFO L130 BoogieDeclarations]: Found specification of procedure reg_timer_1 [2022-11-19 08:31:59,435 INFO L138 BoogieDeclarations]: Found implementation of procedure reg_timer_1 [2022-11-19 08:31:59,435 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_tx_cp [2022-11-19 08:31:59,435 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_tx_cp [2022-11-19 08:31:59,436 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-11-19 08:31:59,436 INFO L130 BoogieDeclarations]: Found specification of procedure mod_timer [2022-11-19 08:31:59,436 INFO L138 BoogieDeclarations]: Found implementation of procedure mod_timer [2022-11-19 08:31:59,436 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2022-11-19 08:31:59,436 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2022-11-19 08:31:59,436 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-19 08:31:59,437 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-11-19 08:31:59,437 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_cp_event [2022-11-19 08:31:59,437 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_cp_event [2022-11-19 08:31:59,437 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2022-11-19 08:31:59,437 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2022-11-19 08:31:59,437 INFO L130 BoogieDeclarations]: Found specification of procedure __fswab16 [2022-11-19 08:31:59,437 INFO L138 BoogieDeclarations]: Found implementation of procedure __fswab16 [2022-11-19 08:31:59,438 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2022-11-19 08:31:59,438 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2022-11-19 08:31:59,439 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_ioctl [2022-11-19 08:31:59,439 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_ioctl [2022-11-19 08:31:59,439 INFO L130 BoogieDeclarations]: Found specification of procedure proto_name [2022-11-19 08:31:59,439 INFO L138 BoogieDeclarations]: Found implementation of procedure proto_name [2022-11-19 08:31:59,439 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-19 08:31:59,440 INFO L130 BoogieDeclarations]: Found specification of procedure linkwatch_fire_event [2022-11-19 08:31:59,440 INFO L138 BoogieDeclarations]: Found implementation of procedure linkwatch_fire_event [2022-11-19 08:31:59,440 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2022-11-19 08:31:59,440 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-11-19 08:31:59,440 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-11-19 08:31:59,440 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-19 08:31:59,441 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-19 08:31:59,963 INFO L235 CfgBuilder]: Building ICFG [2022-11-19 08:31:59,965 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-19 08:32:00,727 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-11-19 08:32:01,804 INFO L276 CfgBuilder]: Performing block encoding [2022-11-19 08:32:02,181 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-19 08:32:02,181 INFO L300 CfgBuilder]: Removed 1 assume(true) statements. [2022-11-19 08:32:02,185 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 08:32:02 BoogieIcfgContainer [2022-11-19 08:32:02,185 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-19 08:32:02,187 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-19 08:32:02,187 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-19 08:32:02,191 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-19 08:32:02,191 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 19.11 08:31:57" (1/3) ... [2022-11-19 08:32:02,192 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1ffbdf78 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 08:32:02, skipping insertion in model container [2022-11-19 08:32:02,192 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:31:58" (2/3) ... [2022-11-19 08:32:02,192 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1ffbdf78 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 08:32:02, skipping insertion in model container [2022-11-19 08:32:02,192 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 08:32:02" (3/3) ... [2022-11-19 08:32:02,193 INFO L112 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_ppp.ko-entry_point.cil.out.i [2022-11-19 08:32:02,212 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-19 08:32:02,213 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-19 08:32:02,275 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-19 08:32:02,281 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@f609fb9, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-19 08:32:02,281 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-19 08:32:02,287 INFO L276 IsEmpty]: Start isEmpty. Operand has 460 states, 300 states have (on average 1.4466666666666668) internal successors, (434), 321 states have internal predecessors, (434), 126 states have call successors, (126), 33 states have call predecessors, (126), 32 states have return successors, (122), 115 states have call predecessors, (122), 122 states have call successors, (122) [2022-11-19 08:32:02,297 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-19 08:32:02,298 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 08:32:02,298 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 08:32:02,299 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 08:32:02,304 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 08:32:02,304 INFO L85 PathProgramCache]: Analyzing trace with hash 1389361173, now seen corresponding path program 1 times [2022-11-19 08:32:02,314 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 08:32:02,315 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1749515098] [2022-11-19 08:32:02,315 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 08:32:02,315 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 08:32:02,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 08:32:02,882 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2022-11-19 08:32:02,884 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 08:32:02,885 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1749515098] [2022-11-19 08:32:02,890 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1749515098] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 08:32:02,890 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 08:32:02,891 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-19 08:32:02,892 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1775623618] [2022-11-19 08:32:02,893 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 08:32:02,897 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 08:32:02,898 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 08:32:02,934 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 08:32:02,934 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 08:32:02,939 INFO L87 Difference]: Start difference. First operand has 460 states, 300 states have (on average 1.4466666666666668) internal successors, (434), 321 states have internal predecessors, (434), 126 states have call successors, (126), 33 states have call predecessors, (126), 32 states have return successors, (122), 115 states have call predecessors, (122), 122 states have call successors, (122) Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-11-19 08:32:03,615 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 08:32:03,616 INFO L93 Difference]: Finished difference Result 1340 states and 2070 transitions. [2022-11-19 08:32:03,617 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 08:32:03,618 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) Word has length 41 [2022-11-19 08:32:03,619 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 08:32:03,650 INFO L225 Difference]: With dead ends: 1340 [2022-11-19 08:32:03,657 INFO L226 Difference]: Without dead ends: 875 [2022-11-19 08:32:03,672 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 08:32:03,681 INFO L413 NwaCegarLoop]: 715 mSDtfsCounter, 641 mSDsluCounter, 588 mSDsCounter, 0 mSdLazyCounter, 165 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 641 SdHoareTripleChecker+Valid, 1303 SdHoareTripleChecker+Invalid, 170 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 165 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-19 08:32:03,683 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [641 Valid, 1303 Invalid, 170 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 165 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-19 08:32:03,705 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 875 states. [2022-11-19 08:32:03,797 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 875 to 875. [2022-11-19 08:32:03,800 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 875 states, 578 states have (on average 1.42560553633218) internal successors, (824), 608 states have internal predecessors, (824), 234 states have call successors, (234), 63 states have call predecessors, (234), 62 states have return successors, (233), 219 states have call predecessors, (233), 233 states have call successors, (233) [2022-11-19 08:32:03,809 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 875 states to 875 states and 1291 transitions. [2022-11-19 08:32:03,811 INFO L78 Accepts]: Start accepts. Automaton has 875 states and 1291 transitions. Word has length 41 [2022-11-19 08:32:03,812 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 08:32:03,812 INFO L495 AbstractCegarLoop]: Abstraction has 875 states and 1291 transitions. [2022-11-19 08:32:03,812 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-11-19 08:32:03,813 INFO L276 IsEmpty]: Start isEmpty. Operand 875 states and 1291 transitions. [2022-11-19 08:32:03,817 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-11-19 08:32:03,817 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 08:32:03,817 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 08:32:03,818 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-19 08:32:03,818 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 08:32:03,819 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 08:32:03,819 INFO L85 PathProgramCache]: Analyzing trace with hash -2000469483, now seen corresponding path program 1 times [2022-11-19 08:32:03,819 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 08:32:03,819 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1333243460] [2022-11-19 08:32:03,819 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 08:32:03,820 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 08:32:03,899 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 08:32:04,159 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2022-11-19 08:32:04,159 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 08:32:04,159 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1333243460] [2022-11-19 08:32:04,160 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1333243460] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 08:32:04,160 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 08:32:04,160 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-19 08:32:04,160 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [141713284] [2022-11-19 08:32:04,160 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 08:32:04,162 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-19 08:32:04,162 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 08:32:04,162 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-19 08:32:04,163 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-19 08:32:04,163 INFO L87 Difference]: Start difference. First operand 875 states and 1291 transitions. Second operand has 4 states, 4 states have (on average 6.25) internal successors, (25), 4 states have internal predecessors, (25), 3 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-19 08:32:04,772 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 08:32:04,772 INFO L93 Difference]: Finished difference Result 1739 states and 2644 transitions. [2022-11-19 08:32:04,772 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-19 08:32:04,773 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 6.25) internal successors, (25), 4 states have internal predecessors, (25), 3 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 52 [2022-11-19 08:32:04,773 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 08:32:04,811 INFO L225 Difference]: With dead ends: 1739 [2022-11-19 08:32:04,812 INFO L226 Difference]: Without dead ends: 1734 [2022-11-19 08:32:04,817 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-19 08:32:04,824 INFO L413 NwaCegarLoop]: 720 mSDtfsCounter, 645 mSDsluCounter, 1330 mSDsCounter, 0 mSdLazyCounter, 241 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 645 SdHoareTripleChecker+Valid, 2050 SdHoareTripleChecker+Invalid, 242 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 241 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-19 08:32:04,825 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [645 Valid, 2050 Invalid, 242 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 241 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-19 08:32:04,832 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1734 states. [2022-11-19 08:32:04,982 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1734 to 1732. [2022-11-19 08:32:04,987 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1732 states, 1145 states have (on average 1.4270742358078603) internal successors, (1634), 1205 states have internal predecessors, (1634), 462 states have call successors, (462), 125 states have call predecessors, (462), 124 states have return successors, (539), 433 states have call predecessors, (539), 461 states have call successors, (539) [2022-11-19 08:32:05,010 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1732 states to 1732 states and 2635 transitions. [2022-11-19 08:32:05,012 INFO L78 Accepts]: Start accepts. Automaton has 1732 states and 2635 transitions. Word has length 52 [2022-11-19 08:32:05,013 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 08:32:05,013 INFO L495 AbstractCegarLoop]: Abstraction has 1732 states and 2635 transitions. [2022-11-19 08:32:05,013 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 6.25) internal successors, (25), 4 states have internal predecessors, (25), 3 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-19 08:32:05,014 INFO L276 IsEmpty]: Start isEmpty. Operand 1732 states and 2635 transitions. [2022-11-19 08:32:05,028 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2022-11-19 08:32:05,029 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 08:32:05,029 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 08:32:05,029 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-19 08:32:05,030 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 08:32:05,031 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 08:32:05,031 INFO L85 PathProgramCache]: Analyzing trace with hash 828325682, now seen corresponding path program 1 times [2022-11-19 08:32:05,032 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 08:32:05,032 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [832906381] [2022-11-19 08:32:05,032 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 08:32:05,032 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 08:32:05,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 08:32:05,228 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 60 trivial. 0 not checked. [2022-11-19 08:32:05,228 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 08:32:05,229 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [832906381] [2022-11-19 08:32:05,229 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [832906381] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 08:32:05,229 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 08:32:05,229 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-19 08:32:05,230 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1207924019] [2022-11-19 08:32:05,230 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 08:32:05,231 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 08:32:05,231 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 08:32:05,231 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 08:32:05,232 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 08:32:05,232 INFO L87 Difference]: Start difference. First operand 1732 states and 2635 transitions. Second operand has 3 states, 3 states have (on average 16.666666666666668) internal successors, (50), 3 states have internal predecessors, (50), 2 states have call successors, (11), 2 states have call predecessors, (11), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-11-19 08:32:05,826 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 08:32:05,826 INFO L93 Difference]: Finished difference Result 4316 states and 6446 transitions. [2022-11-19 08:32:05,827 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 08:32:05,827 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 16.666666666666668) internal successors, (50), 3 states have internal predecessors, (50), 2 states have call successors, (11), 2 states have call predecessors, (11), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 86 [2022-11-19 08:32:05,828 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 08:32:05,856 INFO L225 Difference]: With dead ends: 4316 [2022-11-19 08:32:05,857 INFO L226 Difference]: Without dead ends: 2595 [2022-11-19 08:32:05,874 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 08:32:05,875 INFO L413 NwaCegarLoop]: 645 mSDtfsCounter, 308 mSDsluCounter, 507 mSDsCounter, 0 mSdLazyCounter, 221 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 308 SdHoareTripleChecker+Valid, 1152 SdHoareTripleChecker+Invalid, 223 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 221 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-19 08:32:05,875 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [308 Valid, 1152 Invalid, 223 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 221 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-19 08:32:05,879 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2595 states. [2022-11-19 08:32:06,032 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2595 to 2590. [2022-11-19 08:32:06,037 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2590 states, 1697 states have (on average 1.3942251031231585) internal successors, (2366), 1785 states have internal predecessors, (2366), 670 states have call successors, (670), 223 states have call predecessors, (670), 222 states have return successors, (783), 641 states have call predecessors, (783), 669 states have call successors, (783) [2022-11-19 08:32:06,075 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2590 states to 2590 states and 3819 transitions. [2022-11-19 08:32:06,077 INFO L78 Accepts]: Start accepts. Automaton has 2590 states and 3819 transitions. Word has length 86 [2022-11-19 08:32:06,079 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 08:32:06,081 INFO L495 AbstractCegarLoop]: Abstraction has 2590 states and 3819 transitions. [2022-11-19 08:32:06,082 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 16.666666666666668) internal successors, (50), 3 states have internal predecessors, (50), 2 states have call successors, (11), 2 states have call predecessors, (11), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-11-19 08:32:06,082 INFO L276 IsEmpty]: Start isEmpty. Operand 2590 states and 3819 transitions. [2022-11-19 08:32:06,088 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2022-11-19 08:32:06,088 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 08:32:06,091 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 08:32:06,092 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-19 08:32:06,096 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 08:32:06,103 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 08:32:06,107 INFO L85 PathProgramCache]: Analyzing trace with hash -735917683, now seen corresponding path program 1 times [2022-11-19 08:32:06,107 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 08:32:06,107 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [518012007] [2022-11-19 08:32:06,107 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 08:32:06,108 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 08:32:06,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 08:32:06,600 INFO L134 CoverageAnalysis]: Checked inductivity of 64 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 52 trivial. 0 not checked. [2022-11-19 08:32:06,602 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 08:32:06,603 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [518012007] [2022-11-19 08:32:06,603 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [518012007] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 08:32:06,603 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 08:32:06,603 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-19 08:32:06,603 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [626136322] [2022-11-19 08:32:06,604 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 08:32:06,604 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-19 08:32:06,605 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 08:32:06,606 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-19 08:32:06,606 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-19 08:32:06,606 INFO L87 Difference]: Start difference. First operand 2590 states and 3819 transitions. Second operand has 5 states, 5 states have (on average 10.6) internal successors, (53), 4 states have internal predecessors, (53), 2 states have call successors, (16), 2 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) [2022-11-19 08:32:07,144 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 08:32:07,145 INFO L93 Difference]: Finished difference Result 5217 states and 8037 transitions. [2022-11-19 08:32:07,145 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-19 08:32:07,145 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.6) internal successors, (53), 4 states have internal predecessors, (53), 2 states have call successors, (16), 2 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) Word has length 98 [2022-11-19 08:32:07,146 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 08:32:07,175 INFO L225 Difference]: With dead ends: 5217 [2022-11-19 08:32:07,175 INFO L226 Difference]: Without dead ends: 2638 [2022-11-19 08:32:07,215 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-19 08:32:07,218 INFO L413 NwaCegarLoop]: 586 mSDtfsCounter, 2 mSDsluCounter, 1745 mSDsCounter, 0 mSdLazyCounter, 327 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 2331 SdHoareTripleChecker+Invalid, 328 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 327 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-19 08:32:07,219 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 2331 Invalid, 328 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 327 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-19 08:32:07,224 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2638 states. [2022-11-19 08:32:07,423 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2638 to 2630. [2022-11-19 08:32:07,429 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2630 states, 1725 states have (on average 1.3878260869565218) internal successors, (2394), 1817 states have internal predecessors, (2394), 670 states have call successors, (670), 223 states have call predecessors, (670), 234 states have return successors, (808), 649 states have call predecessors, (808), 669 states have call successors, (808) [2022-11-19 08:32:07,453 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2630 states to 2630 states and 3872 transitions. [2022-11-19 08:32:07,455 INFO L78 Accepts]: Start accepts. Automaton has 2630 states and 3872 transitions. Word has length 98 [2022-11-19 08:32:07,456 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 08:32:07,456 INFO L495 AbstractCegarLoop]: Abstraction has 2630 states and 3872 transitions. [2022-11-19 08:32:07,456 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.6) internal successors, (53), 4 states have internal predecessors, (53), 2 states have call successors, (16), 2 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) [2022-11-19 08:32:07,457 INFO L276 IsEmpty]: Start isEmpty. Operand 2630 states and 3872 transitions. [2022-11-19 08:32:07,462 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 103 [2022-11-19 08:32:07,462 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 08:32:07,462 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 08:32:07,463 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-19 08:32:07,463 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 08:32:07,463 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 08:32:07,464 INFO L85 PathProgramCache]: Analyzing trace with hash -1333984353, now seen corresponding path program 1 times [2022-11-19 08:32:07,464 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 08:32:07,464 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [900226118] [2022-11-19 08:32:07,464 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 08:32:07,464 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 08:32:07,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 08:32:07,790 INFO L134 CoverageAnalysis]: Checked inductivity of 64 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 64 trivial. 0 not checked. [2022-11-19 08:32:07,790 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 08:32:07,790 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [900226118] [2022-11-19 08:32:07,790 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [900226118] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 08:32:07,791 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 08:32:07,791 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-19 08:32:07,791 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1197367417] [2022-11-19 08:32:07,791 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 08:32:07,792 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 08:32:07,792 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 08:32:07,793 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 08:32:07,793 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 08:32:07,793 INFO L87 Difference]: Start difference. First operand 2630 states and 3872 transitions. Second operand has 3 states, 3 states have (on average 17.666666666666668) internal successors, (53), 3 states have internal predecessors, (53), 2 states have call successors, (17), 2 states have call predecessors, (17), 1 states have return successors, (16), 1 states have call predecessors, (16), 1 states have call successors, (16) [2022-11-19 08:32:08,127 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 08:32:08,127 INFO L93 Difference]: Finished difference Result 4396 states and 6422 transitions. [2022-11-19 08:32:08,128 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 08:32:08,128 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 17.666666666666668) internal successors, (53), 3 states have internal predecessors, (53), 2 states have call successors, (17), 2 states have call predecessors, (17), 1 states have return successors, (16), 1 states have call predecessors, (16), 1 states have call successors, (16) Word has length 102 [2022-11-19 08:32:08,131 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 08:32:08,156 INFO L225 Difference]: With dead ends: 4396 [2022-11-19 08:32:08,157 INFO L226 Difference]: Without dead ends: 1777 [2022-11-19 08:32:08,218 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 08:32:08,219 INFO L413 NwaCegarLoop]: 583 mSDtfsCounter, 660 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 79 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 660 SdHoareTripleChecker+Valid, 583 SdHoareTripleChecker+Invalid, 81 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 79 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-19 08:32:08,219 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [660 Valid, 583 Invalid, 81 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 79 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-19 08:32:08,222 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1777 states. [2022-11-19 08:32:08,381 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1777 to 1765. [2022-11-19 08:32:08,385 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1765 states, 1149 states have (on average 1.3672758920800696) internal successors, (1571), 1212 states have internal predecessors, (1571), 444 states have call successors, (444), 163 states have call predecessors, (444), 171 states have return successors, (539), 433 states have call predecessors, (539), 443 states have call successors, (539) [2022-11-19 08:32:08,406 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1765 states to 1765 states and 2554 transitions. [2022-11-19 08:32:08,407 INFO L78 Accepts]: Start accepts. Automaton has 1765 states and 2554 transitions. Word has length 102 [2022-11-19 08:32:08,408 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 08:32:08,408 INFO L495 AbstractCegarLoop]: Abstraction has 1765 states and 2554 transitions. [2022-11-19 08:32:08,408 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 17.666666666666668) internal successors, (53), 3 states have internal predecessors, (53), 2 states have call successors, (17), 2 states have call predecessors, (17), 1 states have return successors, (16), 1 states have call predecessors, (16), 1 states have call successors, (16) [2022-11-19 08:32:08,408 INFO L276 IsEmpty]: Start isEmpty. Operand 1765 states and 2554 transitions. [2022-11-19 08:32:08,417 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 121 [2022-11-19 08:32:08,417 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 08:32:08,418 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 08:32:08,418 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-19 08:32:08,418 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 08:32:08,419 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 08:32:08,419 INFO L85 PathProgramCache]: Analyzing trace with hash -884974066, now seen corresponding path program 1 times [2022-11-19 08:32:08,419 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 08:32:08,419 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [508961201] [2022-11-19 08:32:08,420 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 08:32:08,420 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 08:32:08,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 08:32:10,021 INFO L134 CoverageAnalysis]: Checked inductivity of 123 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 102 trivial. 0 not checked. [2022-11-19 08:32:10,021 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 08:32:10,021 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [508961201] [2022-11-19 08:32:10,022 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [508961201] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 08:32:10,022 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 08:32:10,022 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-11-19 08:32:10,022 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2143452223] [2022-11-19 08:32:10,022 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 08:32:10,023 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-11-19 08:32:10,023 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 08:32:10,023 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-11-19 08:32:10,023 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=90, Unknown=0, NotChecked=0, Total=110 [2022-11-19 08:32:10,023 INFO L87 Difference]: Start difference. First operand 1765 states and 2554 transitions. Second operand has 11 states, 9 states have (on average 6.888888888888889) internal successors, (62), 8 states have internal predecessors, (62), 3 states have call successors, (19), 2 states have call predecessors, (19), 5 states have return successors, (18), 5 states have call predecessors, (18), 2 states have call successors, (18) [2022-11-19 08:32:11,219 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 08:32:11,221 INFO L93 Difference]: Finished difference Result 3561 states and 5355 transitions. [2022-11-19 08:32:11,221 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-19 08:32:11,222 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 9 states have (on average 6.888888888888889) internal successors, (62), 8 states have internal predecessors, (62), 3 states have call successors, (19), 2 states have call predecessors, (19), 5 states have return successors, (18), 5 states have call predecessors, (18), 2 states have call successors, (18) Word has length 120 [2022-11-19 08:32:11,222 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 08:32:11,240 INFO L225 Difference]: With dead ends: 3561 [2022-11-19 08:32:11,241 INFO L226 Difference]: Without dead ends: 1807 [2022-11-19 08:32:11,263 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=33, Invalid=149, Unknown=0, NotChecked=0, Total=182 [2022-11-19 08:32:11,264 INFO L413 NwaCegarLoop]: 595 mSDtfsCounter, 9 mSDsluCounter, 5309 mSDsCounter, 0 mSdLazyCounter, 867 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 11 SdHoareTripleChecker+Valid, 5904 SdHoareTripleChecker+Invalid, 868 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 867 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-11-19 08:32:11,264 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [11 Valid, 5904 Invalid, 868 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 867 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-11-19 08:32:11,268 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1807 states. [2022-11-19 08:32:11,437 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1807 to 1783. [2022-11-19 08:32:11,441 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1783 states, 1164 states have (on average 1.3573883161512028) internal successors, (1580), 1224 states have internal predecessors, (1580), 444 states have call successors, (444), 163 states have call predecessors, (444), 174 states have return successors, (545), 439 states have call predecessors, (545), 443 states have call successors, (545) [2022-11-19 08:32:11,456 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1783 states to 1783 states and 2569 transitions. [2022-11-19 08:32:11,457 INFO L78 Accepts]: Start accepts. Automaton has 1783 states and 2569 transitions. Word has length 120 [2022-11-19 08:32:11,457 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 08:32:11,458 INFO L495 AbstractCegarLoop]: Abstraction has 1783 states and 2569 transitions. [2022-11-19 08:32:11,458 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 9 states have (on average 6.888888888888889) internal successors, (62), 8 states have internal predecessors, (62), 3 states have call successors, (19), 2 states have call predecessors, (19), 5 states have return successors, (18), 5 states have call predecessors, (18), 2 states have call successors, (18) [2022-11-19 08:32:11,458 INFO L276 IsEmpty]: Start isEmpty. Operand 1783 states and 2569 transitions. [2022-11-19 08:32:11,467 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 123 [2022-11-19 08:32:11,468 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 08:32:11,468 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 8, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 08:32:11,468 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-19 08:32:11,468 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 08:32:11,469 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 08:32:11,469 INFO L85 PathProgramCache]: Analyzing trace with hash -1893796073, now seen corresponding path program 1 times [2022-11-19 08:32:11,469 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 08:32:11,469 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [794347018] [2022-11-19 08:32:11,469 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 08:32:11,470 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 08:32:11,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 08:32:11,680 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 154 trivial. 0 not checked. [2022-11-19 08:32:11,681 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 08:32:11,681 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [794347018] [2022-11-19 08:32:11,681 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [794347018] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 08:32:11,681 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 08:32:11,681 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-19 08:32:11,682 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2017791685] [2022-11-19 08:32:11,682 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 08:32:11,682 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 08:32:11,682 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 08:32:11,683 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 08:32:11,683 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 08:32:11,683 INFO L87 Difference]: Start difference. First operand 1783 states and 2569 transitions. Second operand has 3 states, 3 states have (on average 21.0) internal successors, (63), 3 states have internal predecessors, (63), 3 states have call successors, (14), 2 states have call predecessors, (14), 1 states have return successors, (13), 3 states have call predecessors, (13), 3 states have call successors, (13) [2022-11-19 08:32:12,312 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 08:32:12,312 INFO L93 Difference]: Finished difference Result 3910 states and 5703 transitions. [2022-11-19 08:32:12,312 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 08:32:12,313 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 21.0) internal successors, (63), 3 states have internal predecessors, (63), 3 states have call successors, (14), 2 states have call predecessors, (14), 1 states have return successors, (13), 3 states have call predecessors, (13), 3 states have call successors, (13) Word has length 122 [2022-11-19 08:32:12,313 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 08:32:12,340 INFO L225 Difference]: With dead ends: 3910 [2022-11-19 08:32:12,340 INFO L226 Difference]: Without dead ends: 2571 [2022-11-19 08:32:12,351 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 08:32:12,351 INFO L413 NwaCegarLoop]: 850 mSDtfsCounter, 538 mSDsluCounter, 507 mSDsCounter, 0 mSdLazyCounter, 278 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 538 SdHoareTripleChecker+Valid, 1357 SdHoareTripleChecker+Invalid, 307 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 278 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-19 08:32:12,352 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [538 Valid, 1357 Invalid, 307 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 278 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-19 08:32:12,355 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2571 states. [2022-11-19 08:32:12,551 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2571 to 2548. [2022-11-19 08:32:12,558 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2548 states, 1687 states have (on average 1.3633669235328987) internal successors, (2300), 1777 states have internal predecessors, (2300), 622 states have call successors, (622), 223 states have call predecessors, (622), 238 states have return successors, (760), 607 states have call predecessors, (760), 621 states have call successors, (760) [2022-11-19 08:32:12,578 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2548 states to 2548 states and 3682 transitions. [2022-11-19 08:32:12,579 INFO L78 Accepts]: Start accepts. Automaton has 2548 states and 3682 transitions. Word has length 122 [2022-11-19 08:32:12,579 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 08:32:12,579 INFO L495 AbstractCegarLoop]: Abstraction has 2548 states and 3682 transitions. [2022-11-19 08:32:12,580 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 21.0) internal successors, (63), 3 states have internal predecessors, (63), 3 states have call successors, (14), 2 states have call predecessors, (14), 1 states have return successors, (13), 3 states have call predecessors, (13), 3 states have call successors, (13) [2022-11-19 08:32:12,580 INFO L276 IsEmpty]: Start isEmpty. Operand 2548 states and 3682 transitions. [2022-11-19 08:32:12,592 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 135 [2022-11-19 08:32:12,593 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 08:32:12,593 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 8, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 08:32:12,593 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-19 08:32:12,593 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 08:32:12,594 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 08:32:12,594 INFO L85 PathProgramCache]: Analyzing trace with hash -656481316, now seen corresponding path program 1 times [2022-11-19 08:32:12,594 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 08:32:12,594 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [908504088] [2022-11-19 08:32:12,595 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 08:32:12,595 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 08:32:12,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-19 08:32:12,742 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-19 08:32:12,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-19 08:32:12,920 INFO L130 FreeRefinementEngine]: Strategy SIFA_TAIPAN found a feasible trace [2022-11-19 08:32:12,920 INFO L359 BasicCegarLoop]: Counterexample is feasible [2022-11-19 08:32:12,921 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-19 08:32:12,923 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-19 08:32:12,926 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 08:32:12,931 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-19 08:32:12,974 WARN L421 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-19 08:32:12,975 WARN L421 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-19 08:32:12,975 WARN L421 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-19 08:32:12,975 WARN L421 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-19 08:32:12,976 WARN L421 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-19 08:32:12,976 WARN L421 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-19 08:32:12,976 WARN L421 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-19 08:32:12,976 WARN L421 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-19 08:32:13,137 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 19.11 08:32:13 BoogieIcfgContainer [2022-11-19 08:32:13,138 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-19 08:32:13,138 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-19 08:32:13,138 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-19 08:32:13,139 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-19 08:32:13,139 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 08:32:02" (3/4) ... [2022-11-19 08:32:13,142 INFO L131 WitnessPrinter]: Generating witness for reachability counterexample [2022-11-19 08:32:13,175 WARN L421 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-19 08:32:13,175 WARN L421 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-19 08:32:13,176 WARN L421 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-19 08:32:13,176 WARN L421 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-19 08:32:13,176 WARN L421 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-19 08:32:13,176 WARN L421 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-19 08:32:13,177 WARN L421 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-19 08:32:13,177 WARN L421 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-19 08:32:13,325 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a8a507d3-ac84-4807-96eb-039b79995062/bin/utaipan-I9t0OCRTmS/witness.graphml [2022-11-19 08:32:13,325 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-19 08:32:13,326 INFO L158 Benchmark]: Toolchain (without parser) took 16116.41ms. Allocated memory was 104.9MB in the beginning and 499.1MB in the end (delta: 394.3MB). Free memory was 80.9MB in the beginning and 299.6MB in the end (delta: -218.7MB). Peak memory consumption was 174.1MB. Max. memory is 16.1GB. [2022-11-19 08:32:13,326 INFO L158 Benchmark]: CDTParser took 0.24ms. Allocated memory is still 104.9MB. Free memory is still 83.4MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-19 08:32:13,326 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1779.61ms. Allocated memory was 104.9MB in the beginning and 148.9MB in the end (delta: 44.0MB). Free memory was 80.6MB in the beginning and 68.7MB in the end (delta: 12.0MB). Peak memory consumption was 61.1MB. Max. memory is 16.1GB. [2022-11-19 08:32:13,327 INFO L158 Benchmark]: Boogie Procedure Inliner took 175.90ms. Allocated memory is still 148.9MB. Free memory was 68.7MB in the beginning and 98.8MB in the end (delta: -30.1MB). Peak memory consumption was 22.3MB. Max. memory is 16.1GB. [2022-11-19 08:32:13,327 INFO L158 Benchmark]: Boogie Preprocessor took 160.64ms. Allocated memory is still 148.9MB. Free memory was 98.8MB in the beginning and 88.3MB in the end (delta: 10.5MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-11-19 08:32:13,327 INFO L158 Benchmark]: RCFGBuilder took 2852.85ms. Allocated memory was 148.9MB in the beginning and 222.3MB in the end (delta: 73.4MB). Free memory was 88.3MB in the beginning and 102.6MB in the end (delta: -14.3MB). Peak memory consumption was 79.8MB. Max. memory is 16.1GB. [2022-11-19 08:32:13,328 INFO L158 Benchmark]: TraceAbstraction took 10950.60ms. Allocated memory was 222.3MB in the beginning and 499.1MB in the end (delta: 276.8MB). Free memory was 101.6MB in the beginning and 331.1MB in the end (delta: -229.5MB). Peak memory consumption was 47.3MB. Max. memory is 16.1GB. [2022-11-19 08:32:13,328 INFO L158 Benchmark]: Witness Printer took 187.05ms. Allocated memory is still 499.1MB. Free memory was 331.1MB in the beginning and 299.6MB in the end (delta: 31.5MB). Peak memory consumption was 31.5MB. Max. memory is 16.1GB. [2022-11-19 08:32:13,334 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.24ms. Allocated memory is still 104.9MB. Free memory is still 83.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1779.61ms. Allocated memory was 104.9MB in the beginning and 148.9MB in the end (delta: 44.0MB). Free memory was 80.6MB in the beginning and 68.7MB in the end (delta: 12.0MB). Peak memory consumption was 61.1MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 175.90ms. Allocated memory is still 148.9MB. Free memory was 68.7MB in the beginning and 98.8MB in the end (delta: -30.1MB). Peak memory consumption was 22.3MB. Max. memory is 16.1GB. * Boogie Preprocessor took 160.64ms. Allocated memory is still 148.9MB. Free memory was 98.8MB in the beginning and 88.3MB in the end (delta: 10.5MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * RCFGBuilder took 2852.85ms. Allocated memory was 148.9MB in the beginning and 222.3MB in the end (delta: 73.4MB). Free memory was 88.3MB in the beginning and 102.6MB in the end (delta: -14.3MB). Peak memory consumption was 79.8MB. Max. memory is 16.1GB. * TraceAbstraction took 10950.60ms. Allocated memory was 222.3MB in the beginning and 499.1MB in the end (delta: 276.8MB). Free memory was 101.6MB in the beginning and 331.1MB in the end (delta: -229.5MB). Peak memory consumption was 47.3MB. Max. memory is 16.1GB. * Witness Printer took 187.05ms. Allocated memory is still 499.1MB. Free memory was 331.1MB in the beginning and 299.6MB in the end (delta: 31.5MB). Peak memory consumption was 31.5MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - CounterExampleResult [Line: 5283]: a call to reach_error is reachable a call to reach_error is reachable We found a FailurePath: [L5315] struct timer_list *ldv_timer_list_1 ; [L5543-L5569] static int cp_table[13U][7U] = { { 163, 16, 16, 16, 16, 16, 16}, { 16, 0, 0, 0, 0, 0, 0}, { 16, 16, 1026, 131, 131, 133, 16}, { 16, 16, 1, 1, 1, 1, 16}, { 2048, 421, 2, 261, 262, 261, 389}, { 2048, 675, 2, 515, 516, 515, 643}, { 2048, 2049, 2, 36, 131, 6, 131}, { 2048, 2049, 2, 163, 131, 165, 131}, { 2048, 2049, 2050, 2051, 2051, 2051, 2114}, { 0, 1, 1, 3, 3, 5, 131}, { 4096, 4097, 4098, 4099, 4100, 4101, 4102}, { 0, 1, 2, 3, 3, 5, 6}, { 0, 1, 1, 1, 1, 1, 1058}}; [L6508] Element set_impl[15] ; [L5306] int LDV_IN_INTERRUPT = 1; [L5374] static struct sk_buff_head tx_queue ; [L6643] Set LDV_SKBS ; [L5312] struct sk_buff *proto_group0 ; [L6088] int ldv_retval_0 ; [L6509] int last_index = 0; [L5307] struct net_device *proto_group1 ; [L5313] int ref_cnt ; [L5310] int ldv_timer_state_1 = 0; [L6005-L6007] static struct hdlc_proto proto = {0, & ppp_close, & ppp_start, & ppp_stop, 0, & ppp_ioctl, & ppp_type_trans, & ppp_rx, 0, & __this_module, 0}; [L5311] int ldv_state_variable_2 ; [L5309] int ldv_state_variable_3 ; [L5308] int ldv_state_variable_0 ; [L6008] static struct header_ops const ppp_header_ops = {& ppp_hard_header, 0, 0, 0, 0}; [L5314] int ldv_state_variable_1 ; [L6156] struct ifreq *ldvarg0 ; [L6157] void *tmp ; [L6158] unsigned int ldvarg1 ; [L6159] unsigned int tmp___0 ; [L6160] unsigned short ldvarg4 ; [L6161] unsigned short tmp___1 ; [L6162] struct sk_buff *ldvarg3 ; [L6163] void *tmp___2 ; [L6164] struct net_device *ldvarg5 ; [L6165] void *tmp___3 ; [L6166] void *ldvarg2 ; [L6167] void *tmp___4 ; [L6168] void *ldvarg6 ; [L6169] void *tmp___5 ; [L6170] int tmp___6 ; [L6171] int tmp___7 ; [L6172] int tmp___8 ; [L6173] int tmp___9 ; VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L6175] CALL, EXPR ldv_zalloc(40UL) VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L5248] void *p ; [L5249] void *tmp ; [L5250] int tmp___0 ; [L5252] tmp___0 = __VERIFIER_nondet_int() [L5253] COND TRUE tmp___0 != 0 [L5254] return ((void *)0); VAL [\old(size)=40, \result={0:0}, __this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, size=40, tmp___0=1, tx_queue={14:0}] [L6175] RET, EXPR ldv_zalloc(40UL) VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(40UL)={0:0}, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L6175] tmp = ldv_zalloc(40UL) [L6176] ldvarg0 = (struct ifreq *)tmp [L6177] tmp___0 = __VERIFIER_nondet_uint() [L6178] ldvarg1 = tmp___0 [L6179] tmp___1 = __VERIFIER_nondet_ushort() [L6180] ldvarg4 = tmp___1 VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=11, ldvarg4=65534, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tmp={0:0}, tmp___0=11, tmp___1=65534, tx_queue={14:0}] [L6181] CALL, EXPR ldv_zalloc(232UL) VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L5248] void *p ; [L5249] void *tmp ; [L5250] int tmp___0 ; [L5252] tmp___0 = __VERIFIER_nondet_int() [L5253] COND TRUE tmp___0 != 0 [L5254] return ((void *)0); VAL [\old(size)=232, \result={0:0}, __this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, size=232, tmp___0=1, tx_queue={14:0}] [L6181] RET, EXPR ldv_zalloc(232UL) VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(232UL)={0:0}, ldvarg0={0:0}, ldvarg1=11, ldvarg4=65534, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tmp={0:0}, tmp___0=11, tmp___1=65534, tx_queue={14:0}] [L6181] tmp___2 = ldv_zalloc(232UL) [L6182] ldvarg3 = (struct sk_buff *)tmp___2 VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=11, ldvarg3={0:0}, ldvarg4=65534, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tmp={0:0}, tmp___0=11, tmp___1=65534, tmp___2={0:0}, tx_queue={14:0}] [L6183] CALL, EXPR ldv_zalloc(3264UL) VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L5248] void *p ; [L5249] void *tmp ; [L5250] int tmp___0 ; [L5252] tmp___0 = __VERIFIER_nondet_int() [L5253] COND TRUE tmp___0 != 0 [L5254] return ((void *)0); VAL [\old(size)=3264, \result={0:0}, __this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, size=3264, tmp___0=1, tx_queue={14:0}] [L6183] RET, EXPR ldv_zalloc(3264UL) VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(3264UL)={0:0}, ldvarg0={0:0}, ldvarg1=11, ldvarg3={0:0}, ldvarg4=65534, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tmp={0:0}, tmp___0=11, tmp___1=65534, tmp___2={0:0}, tx_queue={14:0}] [L6183] tmp___3 = ldv_zalloc(3264UL) [L6184] ldvarg5 = (struct net_device *)tmp___3 VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=11, ldvarg3={0:0}, ldvarg4=65534, ldvarg5={0:0}, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tmp={0:0}, tmp___0=11, tmp___1=65534, tmp___2={0:0}, tmp___3={0:0}, tx_queue={14:0}] [L6185] CALL, EXPR ldv_zalloc(1UL) VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L5248] void *p ; [L5249] void *tmp ; [L5250] int tmp___0 ; [L5252] tmp___0 = __VERIFIER_nondet_int() [L5253] COND TRUE tmp___0 != 0 [L5254] return ((void *)0); VAL [\old(size)=1, \result={0:0}, __this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, size=1, tmp___0=1, tx_queue={14:0}] [L6185] RET, EXPR ldv_zalloc(1UL) VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=11, ldvarg3={0:0}, ldvarg4=65534, ldvarg5={0:0}, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tmp={0:0}, tmp___0=11, tmp___1=65534, tmp___2={0:0}, tmp___3={0:0}, tx_queue={14:0}] [L6185] tmp___4 = ldv_zalloc(1UL) [L6186] ldvarg2 = tmp___4 VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=65534, ldvarg5={0:0}, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tmp={0:0}, tmp___0=11, tmp___1=65534, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tx_queue={14:0}] [L6187] CALL, EXPR ldv_zalloc(1UL) VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L5248] void *p ; [L5249] void *tmp ; [L5250] int tmp___0 ; [L5252] tmp___0 = __VERIFIER_nondet_int() [L5253] COND TRUE tmp___0 != 0 [L5254] return ((void *)0); VAL [\old(size)=1, \result={0:0}, __this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, size=1, tmp___0=1, tx_queue={14:0}] [L6187] RET, EXPR ldv_zalloc(1UL) VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=65534, ldvarg5={0:0}, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tmp={0:0}, tmp___0=11, tmp___1=65534, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tx_queue={14:0}] [L6187] tmp___5 = ldv_zalloc(1UL) [L6188] ldvarg6 = tmp___5 [L6189] CALL ldv_initialize() [L6662] CALL ldv_set_init(LDV_SKBS) [L6514] set = set_impl [L6515] last_index = 0 [L6662] RET ldv_set_init(LDV_SKBS) [L6189] RET ldv_initialize() [L6190] ldv_state_variable_1 = 1 [L6191] ref_cnt = 0 [L6192] ldv_state_variable_0 = 1 [L6193] ldv_state_variable_3 = 0 [L6194] ldv_state_variable_2 = 0 VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=65534, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tmp={0:0}, tmp___0=11, tmp___1=65534, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tx_queue={14:0}] [L6196] tmp___6 = __VERIFIER_nondet_int() [L6198] case 0: [L6204] case 1: VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=65534, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tmp={0:0}, tmp___0=11, tmp___1=65534, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tx_queue={14:0}] [L6205] COND TRUE ldv_state_variable_0 != 0 [L6206] tmp___7 = __VERIFIER_nondet_int() [L6208] case 0: [L6216] case 1: VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=65534, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tmp={0:0}, tmp___0=11, tmp___1=65534, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=1, tx_queue={14:0}] [L6217] COND TRUE ldv_state_variable_0 == 1 [L6218] CALL, EXPR mod_init() [L6076] CALL skb_queue_head_init(& tx_queue) [L5188] struct lock_class_key __key ; VAL [__key={17:0}, __this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, list={14:0}, list={14:0}, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L5190] CALL spinlock_check(& list->lock) VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, lock={14:20}, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L5137] return (& lock->ldv_6338.rlock); [L5190] RET spinlock_check(& list->lock) VAL [__key={17:0}, __this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, list={14:0}, list={14:0}, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, spinlock_check(& list->lock)={14:20}, tx_queue={14:0}] [L5191] FCALL __raw_spin_lock_init(& list->lock.ldv_6338.rlock, "&(&list->lock)->rlock", & __key) VAL [__key={17:0}, __this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, list={14:0}, list={14:0}, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L5192] CALL __skb_queue_head_init(list) [L5177] struct sk_buff *tmp ; [L5179] tmp = (struct sk_buff *)list [L5180] list->next = tmp [L5181] list->prev = tmp [L5182] list->qlen = 0U [L5192] RET __skb_queue_head_init(list) [L5193] return; [L6076] RET skb_queue_head_init(& tx_queue) [L6077] FCALL register_hdlc_protocol(& proto) [L6078] return (0); [L6218] RET, EXPR mod_init() [L6218] ldv_retval_0 = mod_init() [L6219] COND TRUE ldv_retval_0 == 0 [L6220] ldv_state_variable_0 = 3 [L6221] ldv_state_variable_2 = 1 [L6222] ldv_state_variable_3 = 1 [L6223] CALL ldv_initialize_hdlc_proto_3() [L6115] void *tmp ; [L6116] void *tmp___0 ; VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L6118] CALL, EXPR ldv_zalloc(3264UL) VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L5248] void *p ; [L5249] void *tmp ; [L5250] int tmp___0 ; [L5252] tmp___0 = __VERIFIER_nondet_int() [L5253] COND TRUE tmp___0 != 0 [L5254] return ((void *)0); VAL [\old(size)=3264, \result={0:0}, __this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, size=3264, tmp___0=1, tx_queue={14:0}] [L6118] RET, EXPR ldv_zalloc(3264UL) VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(3264UL)={0:0}, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L6118] tmp = ldv_zalloc(3264UL) [L6119] proto_group1 = (struct net_device *)tmp VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tmp={0:0}, tx_queue={14:0}] [L6120] CALL, EXPR ldv_zalloc(232UL) VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L5248] void *p ; [L5249] void *tmp ; [L5250] int tmp___0 ; [L5252] tmp___0 = __VERIFIER_nondet_int() [L5253] COND TRUE tmp___0 != 0 [L5254] return ((void *)0); VAL [\old(size)=232, \result={0:0}, __this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, size=232, tmp___0=1, tx_queue={14:0}] [L6120] RET, EXPR ldv_zalloc(232UL) VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(232UL)={0:0}, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tmp={0:0}, tx_queue={14:0}] [L6120] tmp___0 = ldv_zalloc(232UL) [L6121] proto_group0 = (struct sk_buff *)tmp___0 [L6223] RET ldv_initialize_hdlc_proto_3() [L6226] COND FALSE !(ldv_retval_0 != 0) VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=65534, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tmp={0:0}, tmp___0=11, tmp___1=65534, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=1, tx_queue={14:0}] [L6196] tmp___6 = __VERIFIER_nondet_int() [L6198] case 0: VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=65534, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tmp={0:0}, tmp___0=11, tmp___1=65534, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=0, tmp___7=1, tx_queue={14:0}] [L6199] COND TRUE ldv_state_variable_1 != 0 [L6200] CALL choose_timer_1(ldv_timer_list_1) [L6128] LDV_IN_INTERRUPT = 2 [L6129] EXPR timer->data [L6129] EXPR timer->function [L6129] CALL (*(timer->function))(timer->data) [L5913] struct proto *proto___0 ; [L5914] struct ppp *ppp ; [L5915] struct ppp *tmp ; [L5916] unsigned long flags ; [L5917] raw_spinlock_t *tmp___0 ; [L5919] proto___0 = (struct proto *)arg [L5920] EXPR proto___0->dev VAL [\old(arg)=18446744073709551613, __this_module={18446744073709551624:18446744073709551618}, arg=18446744073709551613, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto___0={0:-3}, proto___0->dev={18446744073709551622:-3264}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L5920] CALL, EXPR get_ppp(proto___0->dev) VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, dev={18446744073709551622:-3264}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L5378] struct hdlc_device *tmp ; VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, dev={18446744073709551622:-3264}, dev={18446744073709551622:-3264}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L5380] CALL, EXPR dev_to_hdlc(dev) VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, dev={18446744073709551622:-3264}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L5367] void *tmp ; [L5369] CALL, EXPR netdev_priv((struct net_device const *)dev) [L5324] return ((void *)dev + 3264U); [L5369] RET, EXPR netdev_priv((struct net_device const *)dev) [L5369] tmp = netdev_priv((struct net_device const *)dev) [L5370] return ((struct hdlc_device *)tmp); [L5380] RET, EXPR dev_to_hdlc(dev) VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, dev={18446744073709551622:-3264}, dev={18446744073709551622:-3264}, dev_to_hdlc(dev)={18446744073709551622:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L5380] tmp = dev_to_hdlc(dev) [L5381] EXPR tmp->state [L5381] return ((struct ppp *)tmp->state); [L5920] RET, EXPR get_ppp(proto___0->dev) VAL [\old(arg)=18446744073709551613, __this_module={18446744073709551624:18446744073709551618}, arg=18446744073709551613, cp_table={12:0}, get_ppp(proto___0->dev)={18446744073709551615:-435}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto___0={0:-3}, proto___0->dev={18446744073709551622:-3264}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L5920] tmp = get_ppp(proto___0->dev) [L5921] ppp = tmp VAL [\old(arg)=18446744073709551613, __this_module={18446744073709551624:18446744073709551618}, arg=18446744073709551613, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp={18446744073709551615:-435}, ppp_header_ops={16:0}, proto={15:0}, proto___0={0:-3}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tmp={18446744073709551615:-435}, tx_queue={14:0}] [L5922] CALL, EXPR spinlock_check(& ppp->lock) VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, lock={18446744073709551615:0}, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L5137] return (& lock->ldv_6338.rlock); [L5922] RET, EXPR spinlock_check(& ppp->lock) VAL [\old(arg)=18446744073709551613, __this_module={18446744073709551624:18446744073709551618}, arg=18446744073709551613, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp={18446744073709551615:-435}, ppp_header_ops={16:0}, proto={15:0}, proto___0={0:-3}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, spinlock_check(& ppp->lock)={18446744073709551615:0}, tmp={18446744073709551615:-435}, tx_queue={14:0}] [L5922] tmp___0 = spinlock_check(& ppp->lock) [L5923] CALL, EXPR _raw_spin_lock_irqsave(tmp___0) VAL [__this_module={18446744073709551624:18446744073709551618}, arg0={18446744073709551615:0}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L6731] return __VERIFIER_nondet_ulong(); [L5923] RET, EXPR _raw_spin_lock_irqsave(tmp___0) VAL [\old(arg)=18446744073709551613, __this_module={18446744073709551624:18446744073709551618}, _raw_spin_lock_irqsave(tmp___0)=18446744073709551623, arg=18446744073709551613, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp={18446744073709551615:-435}, ppp_header_ops={16:0}, proto={15:0}, proto___0={0:-3}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tmp={18446744073709551615:-435}, tmp___0={18446744073709551615:0}, tx_queue={14:0}] [L5923] flags = _raw_spin_lock_irqsave(tmp___0) [L5924] proto___0->state [L5925] case 2: [L5926] case 3: [L5927] case 4: [L5928] case 5: [L5936] case 6: [L5955] CALL spin_unlock_irqrestore(& ppp->lock, flags) VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L5143] FCALL _raw_spin_unlock_irqrestore(& lock->ldv_6338.rlock, flags) [L5955] RET spin_unlock_irqrestore(& ppp->lock, flags) VAL [\old(arg)=18446744073709551613, __this_module={18446744073709551624:18446744073709551618}, arg=18446744073709551613, cp_table={12:0}, flags=7, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp={18446744073709551615:-435}, ppp_header_ops={16:0}, proto={15:0}, proto___0={0:-3}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tmp={18446744073709551615:-435}, tmp___0={18446744073709551615:0}, tx_queue={14:0}] [L5956] CALL ppp_tx_flush() VAL [\old(last_index)=0, __this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L5475] struct sk_buff *skb ; VAL [\old(last_index)=0, __this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L5481] CALL, EXPR ldv_skb_dequeue_12(& tx_queue) [L6460] struct sk_buff *tmp ; VAL [\old(last_index)=0, __this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, ldv_func_arg1={14:0}, ldv_func_arg1={14:0}, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L6462] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, __this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L6646] void *skb ; [L6647] void *tmp___7 ; VAL [\old(last_index)=0, __this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L6649] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L5248] void *p ; [L5249] void *tmp ; [L5250] int tmp___0 ; [L5252] tmp___0 = __VERIFIER_nondet_int() [L5253] COND FALSE !(tmp___0 != 0) [L5256] EXPR, FCALL calloc(1UL, size) [L5256] tmp = calloc(1UL, size) [L5257] p = tmp VAL [\old(last_index)=0, \old(size)=248, __this_module={18446744073709551624:18446744073709551618}, calloc(1UL, size)={-18446744073709551615:0}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, p={-18446744073709551615:0}, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, size=248, tmp={-18446744073709551615:0}, tmp___0=0, tx_queue={14:0}] [L5258] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, \old(last_index)=0, __this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L5227] COND FALSE !(!cond) [L5258] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(last_index)=0, \old(size)=248, __this_module={18446744073709551624:18446744073709551618}, calloc(1UL, size)={-18446744073709551615:0}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, p={-18446744073709551615:0}, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, size=248, tmp={-18446744073709551615:0}, tmp___0=0, tx_queue={14:0}] [L5259] return (p); VAL [\old(last_index)=0, \old(size)=248, \result={-18446744073709551615:0}, __this_module={18446744073709551624:18446744073709551618}, calloc(1UL, size)={-18446744073709551615:0}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, p={-18446744073709551615:0}, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, size=248, tmp={-18446744073709551615:0}, tmp___0=0, tx_queue={14:0}] [L6649] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(sizeof(struct sk_buff___0 ))={-18446744073709551615:0}, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L6649] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L6650] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=0, __this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, skb={-18446744073709551615:0}, tmp___7={-18446744073709551615:0}, tx_queue={14:0}] [L6651] COND FALSE !(! skb) [L6654] CALL ldv_set_add(LDV_SKBS, skb) [L6522] int i ; [L6524] i = 0 VAL [\old(last_index)=0, __this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, e={-18446744073709551615:0}, e={-18446744073709551615:0}, i=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={13:0}, tx_queue={14:0}] [L6525] COND TRUE 1 VAL [\old(last_index)=0, __this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, e={-18446744073709551615:0}, e={-18446744073709551615:0}, i=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={13:0}, tx_queue={14:0}] [L6526] COND FALSE !(i < last_index) VAL [\old(last_index)=0, __this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, e={-18446744073709551615:0}, e={-18446744073709551615:0}, i=0, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={13:0}, tx_queue={14:0}] [L6536] COND TRUE last_index < 15 [L6537] set_impl[last_index] = e [L6538] last_index = last_index + 1 VAL [\old(last_index)=0, __this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, e={-18446744073709551615:0}, e={-18446744073709551615:0}, i=0, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={13:0}, tx_queue={14:0}] [L6654] RET ldv_set_add(LDV_SKBS, skb) [L6655] return (skb); VAL [\old(last_index)=0, \result={-18446744073709551615:0}, __this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, skb={-18446744073709551615:0}, tmp___7={-18446744073709551615:0}, tx_queue={14:0}] [L6462] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, __this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=1, ldv_func_arg1={14:0}, ldv_func_arg1={14:0}, LDV_IN_INTERRUPT=2, ldv_retval_0=0, ldv_skb_alloc()={-18446744073709551615:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L6462] tmp = ldv_skb_alloc() [L6463] return (tmp); [L5481] RET, EXPR ldv_skb_dequeue_12(& tx_queue) [L5481] skb = ldv_skb_dequeue_12(& tx_queue) [L5482] COND TRUE (unsigned long )skb != (unsigned long )((struct sk_buff *)0) [L5479] CALL dev_queue_xmit(skb) [L6753] return __VERIFIER_nondet_int(); [L5479] RET dev_queue_xmit(skb) [L5481] CALL, EXPR ldv_skb_dequeue_12(& tx_queue) [L6460] struct sk_buff *tmp ; VAL [\old(last_index)=0, __this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=1, ldv_func_arg1={14:0}, ldv_func_arg1={14:0}, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L6462] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=1, __this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L6646] void *skb ; [L6647] void *tmp___7 ; VAL [\old(last_index)=1, __this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L6649] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=1, __this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L5248] void *p ; [L5249] void *tmp ; [L5250] int tmp___0 ; [L5252] tmp___0 = __VERIFIER_nondet_int() [L5253] COND TRUE tmp___0 != 0 [L5254] return ((void *)0); VAL [\old(last_index)=1, \old(size)=248, \result={0:0}, __this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, size=248, tmp___0=1, tx_queue={14:0}] [L6649] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=1, __this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(sizeof(struct sk_buff___0 ))={0:0}, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L6649] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L6650] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=1, __this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, skb={0:0}, tmp___7={0:0}, tx_queue={14:0}] [L6651] COND TRUE ! skb [L6652] return ((void *)0); VAL [\old(last_index)=1, \result={0:0}, __this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, skb={0:0}, tmp___7={0:0}, tx_queue={14:0}] [L6462] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, __this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=1, ldv_func_arg1={14:0}, ldv_func_arg1={14:0}, LDV_IN_INTERRUPT=2, ldv_retval_0=0, ldv_skb_alloc()={0:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L6462] tmp = ldv_skb_alloc() [L6463] return (tmp); [L5481] RET, EXPR ldv_skb_dequeue_12(& tx_queue) [L5481] skb = ldv_skb_dequeue_12(& tx_queue) [L5482] COND FALSE !((unsigned long )skb != (unsigned long )((struct sk_buff *)0)) [L5956] RET ppp_tx_flush() VAL [\old(arg)=18446744073709551613, __this_module={18446744073709551624:18446744073709551618}, arg=18446744073709551613, cp_table={12:0}, flags=7, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ppp={18446744073709551615:-435}, ppp_header_ops={16:0}, proto={15:0}, proto___0={0:-3}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tmp={18446744073709551615:-435}, tmp___0={18446744073709551615:0}, tx_queue={14:0}] [L6129] RET (*(timer->function))(timer->data) [L6130] LDV_IN_INTERRUPT = 1 [L6131] ldv_timer_state_1 = 2 [L6200] RET choose_timer_1(ldv_timer_list_1) [L6196] tmp___6 = __VERIFIER_nondet_int() [L6198] case 0: [L6204] case 1: VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=65534, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tmp={0:0}, tmp___0=11, tmp___1=65534, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=1, tx_queue={14:0}] [L6205] COND TRUE ldv_state_variable_0 != 0 [L6206] tmp___7 = __VERIFIER_nondet_int() [L6208] case 0: VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=65534, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tmp={0:0}, tmp___0=11, tmp___1=65534, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=0, tx_queue={14:0}] [L6209] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L6210] CALL mod_exit() [L6084] FCALL unregister_hdlc_protocol(& proto) [L6210] RET mod_exit() [L6211] ldv_state_variable_0 = 2 VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=65534, ldvarg5={0:0}, ldvarg6={0:0}, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tmp={0:0}, tmp___0=11, tmp___1=65534, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=0, tx_queue={14:0}] [L6419] CALL ldv_check_final_state() [L6713] int tmp___7 ; [L6715] CALL, EXPR ldv_set_is_empty(LDV_SKBS) [L6604] return (last_index == 0); [L6715] RET, EXPR ldv_set_is_empty(LDV_SKBS) [L6715] tmp___7 = ldv_set_is_empty(LDV_SKBS) [L6716] COND FALSE !(\read(tmp___7)) VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tmp___7=0, tx_queue={14:0}] [L6718] CALL ldv_error() VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] [L5283] reach_error() VAL [__this_module={18446744073709551624:18446744073709551618}, cp_table={12:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ppp_header_ops={16:0}, proto={15:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={13:0}, tx_queue={14:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 34 procedures, 461 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 10.7s, OverallIterations: 8, TraceHistogramMax: 9, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 5.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2805 SdHoareTripleChecker+Valid, 3.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2803 mSDsluCounter, 14680 SdHoareTripleChecker+Invalid, 2.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 9986 mSDsCounter, 41 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2178 IncrementalHoareTripleChecker+Invalid, 2219 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 41 mSolverCounterUnsat, 4694 mSDtfsCounter, 2178 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 37 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=2630occurred in iteration=4, InterpolantAutomatonStates: 33, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.3s AutomataMinimizationTime, 7 MinimizatonAttempts, 74 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 2.8s InterpolantComputationTime, 755 NumberOfCodeBlocks, 755 NumberOfCodeBlocksAsserted, 8 NumberOfCheckSat, 614 ConstructedInterpolants, 0 QuantifiedInterpolants, 914 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 7 InterpolantComputations, 7 PerfectInterpolantSequences, 559/559 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! [2022-11-19 08:32:13,381 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a8a507d3-ac84-4807-96eb-039b79995062/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Writing human readable error path to file UltimateCounterExample.errorpath Result: FALSE