./Ultimate.py --spec /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/properties/unreach-call.prp --file /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--cdc_eem.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version a046e57d Calling Ultimate with: /root/.sdkman/candidates/java/current/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--cdc_eem.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 5ad15ea2ee4e38087fdbbd25111673bb935102e85f8e91f44e32009dacc41114 --- Real Ultimate output --- This is Ultimate 0.2.5-tmp.dk.eval-mul-div-a046e57-m [2024-10-13 08:02:21,418 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-10-13 08:02:21,485 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2024-10-13 08:02:21,493 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-10-13 08:02:21,494 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-10-13 08:02:21,524 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-10-13 08:02:21,525 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-10-13 08:02:21,525 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-10-13 08:02:21,526 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-10-13 08:02:21,526 INFO L153 SettingsManager]: * Use memory slicer=true [2024-10-13 08:02:21,527 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-10-13 08:02:21,527 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-10-13 08:02:21,527 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-10-13 08:02:21,528 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-10-13 08:02:21,528 INFO L153 SettingsManager]: * Use SBE=true [2024-10-13 08:02:21,528 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-10-13 08:02:21,529 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-10-13 08:02:21,529 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-10-13 08:02:21,529 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-10-13 08:02:21,529 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-10-13 08:02:21,530 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-10-13 08:02:21,531 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-10-13 08:02:21,531 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-10-13 08:02:21,531 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-10-13 08:02:21,532 INFO L153 SettingsManager]: * Use constant arrays=true [2024-10-13 08:02:21,532 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-10-13 08:02:21,532 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-10-13 08:02:21,533 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-10-13 08:02:21,533 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-10-13 08:02:21,533 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-10-13 08:02:21,534 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-10-13 08:02:21,535 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-10-13 08:02:21,535 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-10-13 08:02:21,536 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-10-13 08:02:21,536 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-10-13 08:02:21,536 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-10-13 08:02:21,537 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-10-13 08:02:21,537 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-10-13 08:02:21,537 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-10-13 08:02:21,538 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 5ad15ea2ee4e38087fdbbd25111673bb935102e85f8e91f44e32009dacc41114 [2024-10-13 08:02:21,821 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-10-13 08:02:21,852 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-10-13 08:02:21,855 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-10-13 08:02:21,857 INFO L270 PluginConnector]: Initializing CDTParser... [2024-10-13 08:02:21,858 INFO L274 PluginConnector]: CDTParser initialized [2024-10-13 08:02:21,860 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--cdc_eem.ko-entry_point.cil.out.i [2024-10-13 08:02:23,288 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-10-13 08:02:23,760 INFO L384 CDTParser]: Found 1 translation units. [2024-10-13 08:02:23,762 INFO L180 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--cdc_eem.ko-entry_point.cil.out.i [2024-10-13 08:02:23,801 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/84c92dace/d7e58fd8a2734238a95c93b24b645108/FLAG25f57d734 [2024-10-13 08:02:23,880 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/84c92dace/d7e58fd8a2734238a95c93b24b645108 [2024-10-13 08:02:23,882 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-10-13 08:02:23,884 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-10-13 08:02:23,885 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-10-13 08:02:23,885 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-10-13 08:02:23,890 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-10-13 08:02:23,891 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.10 08:02:23" (1/1) ... [2024-10-13 08:02:23,892 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4a767e8c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.10 08:02:23, skipping insertion in model container [2024-10-13 08:02:23,892 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.10 08:02:23" (1/1) ... [2024-10-13 08:02:23,989 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-10-13 08:02:24,762 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--cdc_eem.ko-entry_point.cil.out.i[161556,161569] [2024-10-13 08:02:25,027 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-10-13 08:02:25,054 INFO L200 MainTranslator]: Completed pre-run [2024-10-13 08:02:25,156 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("bswapl %0": "=r" (val): "0" (val)); [5489] [2024-10-13 08:02:25,170 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--cdc_eem.ko-entry_point.cil.out.i[161556,161569] [2024-10-13 08:02:25,215 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-10-13 08:02:25,254 INFO L204 MainTranslator]: Completed translation [2024-10-13 08:02:25,255 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.10 08:02:25 WrapperNode [2024-10-13 08:02:25,255 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-10-13 08:02:25,256 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-10-13 08:02:25,256 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-10-13 08:02:25,256 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-10-13 08:02:25,263 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.10 08:02:25" (1/1) ... [2024-10-13 08:02:25,300 ERROR L1136 TypeChecker]: C: descriptor.function = "eem_rx_fixup" [5955]: Variable #t~ret128 modified in procedure eem_rx_fixup but not declared [2024-10-13 08:02:25,300 ERROR L1136 TypeChecker]: C: descriptor.function = "eem_rx_fixup" [5955]: Undeclared identifier #t~ret128 in IdentifierExpression[#t~ret128,] [2024-10-13 08:02:25,300 ERROR L1136 TypeChecker]: C: descriptor.function = "eem_rx_fixup" [5955]: Wrong parameter type at index 0: CallStatement[null,false,[],write~$Pointer$,[IdentifierExpression[#t~ret128,],StructConstructor[[base,offset],[StructAccessExpression[IdentifierExpression[~#descriptor~0,],base],BinaryExpression[ARITHPLUS,IntegerLiteral[8],StructAccessExpression[IdentifierExpression[~#descriptor~0,],offset]]]],IntegerLiteral[8]]] [2024-10-13 08:02:25,301 ERROR L1136 TypeChecker]: C: descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/155/dscv_tempdir/dscv/ri/205_9a/drivers/net/usb/cdc_eem.o.c.prepared" [5956]: Variable #t~ret129 modified in procedure eem_rx_fixup but not declared [2024-10-13 08:02:25,301 ERROR L1136 TypeChecker]: C: descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/155/dscv_tempdir/dscv/ri/205_9a/drivers/net/usb/cdc_eem.o.c.prepared" [5956]: Undeclared identifier #t~ret129 in IdentifierExpression[#t~ret129,] [2024-10-13 08:02:25,301 ERROR L1136 TypeChecker]: C: descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/155/dscv_tempdir/dscv/ri/205_9a/drivers/net/usb/cdc_eem.o.c.prepared" [5956]: Wrong parameter type at index 0: CallStatement[null,false,[],write~$Pointer$,[IdentifierExpression[#t~ret129,],StructConstructor[[base,offset],[StructAccessExpression[IdentifierExpression[~#descriptor~0,],base],BinaryExpression[ARITHPLUS,IntegerLiteral[16],StructAccessExpression[IdentifierExpression[~#descriptor~0,],offset]]]],IntegerLiteral[8]]] [2024-10-13 08:02:25,301 ERROR L1136 TypeChecker]: C: descriptor.format = "reserved command %04x\n" [5957]: Variable #t~ret130 modified in procedure eem_rx_fixup but not declared [2024-10-13 08:02:25,301 ERROR L1136 TypeChecker]: C: descriptor.format = "reserved command %04x\n" [5957]: Undeclared identifier #t~ret130 in IdentifierExpression[#t~ret130,] [2024-10-13 08:02:25,301 ERROR L1136 TypeChecker]: C: descriptor.format = "reserved command %04x\n" [5957]: Wrong parameter type at index 0: CallStatement[null,false,[],write~$Pointer$,[IdentifierExpression[#t~ret130,],StructConstructor[[base,offset],[StructAccessExpression[IdentifierExpression[~#descriptor~0,],base],BinaryExpression[ARITHPLUS,IntegerLiteral[24],StructAccessExpression[IdentifierExpression[~#descriptor~0,],offset]]]],IntegerLiteral[8]]] [2024-10-13 08:02:25,311 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.10 08:02:25" (1/1) ... [2024-10-13 08:02:25,315 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-10-13 08:02:25,316 INFO L186 ToolchainWalker]: Toolchain execution was canceled (user or tool) before executing de.uni_freiburg.informatik.ultimate.boogie.preprocessor [2024-10-13 08:02:25,317 INFO L158 Benchmark]: Toolchain (without parser) took 1433.08ms. Allocated memory is still 167.8MB. Free memory was 131.4MB in the beginning and 76.0MB in the end (delta: 55.3MB). Peak memory consumption was 54.2MB. Max. memory is 16.1GB. [2024-10-13 08:02:25,321 INFO L158 Benchmark]: CDTParser took 0.23ms. Allocated memory is still 167.8MB. Free memory was 133.0MB in the beginning and 132.8MB in the end (delta: 176.2kB). There was no memory consumed. Max. memory is 16.1GB. [2024-10-13 08:02:25,322 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1370.40ms. Allocated memory is still 167.8MB. Free memory was 131.2MB in the beginning and 78.1MB in the end (delta: 53.1MB). Peak memory consumption was 66.8MB. Max. memory is 16.1GB. [2024-10-13 08:02:25,323 INFO L158 Benchmark]: Boogie Procedure Inliner took 59.82ms. Allocated memory is still 167.8MB. Free memory was 78.1MB in the beginning and 76.0MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2024-10-13 08:02:25,324 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.23ms. Allocated memory is still 167.8MB. Free memory was 133.0MB in the beginning and 132.8MB in the end (delta: 176.2kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1370.40ms. Allocated memory is still 167.8MB. Free memory was 131.2MB in the beginning and 78.1MB in the end (delta: 53.1MB). Peak memory consumption was 66.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 59.82ms. Allocated memory is still 167.8MB. Free memory was 78.1MB in the beginning and 76.0MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - TypeErrorResult [Line: 5955]: Type Error Variable #t~ret128 modified in procedure eem_rx_fixup but not declared - TypeErrorResult [Line: 5955]: Type Error Undeclared identifier #t~ret128 in IdentifierExpression[#t~ret128,] - TypeErrorResult [Line: 5955]: Type Error Wrong parameter type at index 0: CallStatement[null,false,[],write~$Pointer$,[IdentifierExpression[#t~ret128,],StructConstructor[[base,offset],[StructAccessExpression[IdentifierExpression[~#descriptor~0,],base],BinaryExpression[ARITHPLUS,IntegerLiteral[8],StructAccessExpression[IdentifierExpression[~#descriptor~0,],offset]]]],IntegerLiteral[8]]] - TypeErrorResult [Line: 5956]: Type Error Variable #t~ret129 modified in procedure eem_rx_fixup but not declared - TypeErrorResult [Line: 5956]: Type Error Undeclared identifier #t~ret129 in IdentifierExpression[#t~ret129,] - TypeErrorResult [Line: 5956]: Type Error Wrong parameter type at index 0: CallStatement[null,false,[],write~$Pointer$,[IdentifierExpression[#t~ret129,],StructConstructor[[base,offset],[StructAccessExpression[IdentifierExpression[~#descriptor~0,],base],BinaryExpression[ARITHPLUS,IntegerLiteral[16],StructAccessExpression[IdentifierExpression[~#descriptor~0,],offset]]]],IntegerLiteral[8]]] - TypeErrorResult [Line: 5957]: Type Error Variable #t~ret130 modified in procedure eem_rx_fixup but not declared - TypeErrorResult [Line: 5957]: Type Error Undeclared identifier #t~ret130 in IdentifierExpression[#t~ret130,] - TypeErrorResult [Line: 5957]: Type Error Wrong parameter type at index 0: CallStatement[null,false,[],write~$Pointer$,[IdentifierExpression[#t~ret130,],StructConstructor[[base,offset],[StructAccessExpression[IdentifierExpression[~#descriptor~0,],base],BinaryExpression[ARITHPLUS,IntegerLiteral[24],StructAccessExpression[IdentifierExpression[~#descriptor~0,],offset]]]],IntegerLiteral[8]]] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 5489]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("bswapl %0": "=r" (val): "0" (val)); [5489] RESULT: Ultimate could not prove your program: Toolchain returned no result. Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /root/.sdkman/candidates/java/current/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--cdc_eem.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 5ad15ea2ee4e38087fdbbd25111673bb935102e85f8e91f44e32009dacc41114 --- Real Ultimate output --- This is Ultimate 0.2.5-tmp.dk.eval-mul-div-a046e57-m [2024-10-13 08:02:27,572 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-10-13 08:02:27,654 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2024-10-13 08:02:27,663 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-10-13 08:02:27,665 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-10-13 08:02:27,699 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-10-13 08:02:27,699 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-10-13 08:02:27,700 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-10-13 08:02:27,701 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-10-13 08:02:27,701 INFO L153 SettingsManager]: * Use memory slicer=true [2024-10-13 08:02:27,701 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-10-13 08:02:27,702 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-10-13 08:02:27,703 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-10-13 08:02:27,703 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-10-13 08:02:27,703 INFO L153 SettingsManager]: * Use SBE=true [2024-10-13 08:02:27,703 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-10-13 08:02:27,704 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-10-13 08:02:27,704 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-10-13 08:02:27,708 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-10-13 08:02:27,708 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-10-13 08:02:27,708 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-10-13 08:02:27,709 INFO L153 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2024-10-13 08:02:27,709 INFO L153 SettingsManager]: * Use bitvectors instead of ints=true [2024-10-13 08:02:27,709 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-10-13 08:02:27,709 INFO L153 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2024-10-13 08:02:27,709 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-10-13 08:02:27,710 INFO L153 SettingsManager]: * Use constant arrays=true [2024-10-13 08:02:27,710 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-10-13 08:02:27,710 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-10-13 08:02:27,710 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-10-13 08:02:27,711 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-10-13 08:02:27,711 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-10-13 08:02:27,711 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-10-13 08:02:27,711 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-10-13 08:02:27,711 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-10-13 08:02:27,712 INFO L153 SettingsManager]: * Trace refinement strategy=WOLF [2024-10-13 08:02:27,712 INFO L153 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2024-10-13 08:02:27,712 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-10-13 08:02:27,714 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-10-13 08:02:27,715 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-10-13 08:02:27,715 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-10-13 08:02:27,716 INFO L153 SettingsManager]: * Logic for external solver=AUFBV [2024-10-13 08:02:27,716 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 5ad15ea2ee4e38087fdbbd25111673bb935102e85f8e91f44e32009dacc41114 [2024-10-13 08:02:28,093 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-10-13 08:02:28,124 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-10-13 08:02:28,128 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-10-13 08:02:28,129 INFO L270 PluginConnector]: Initializing CDTParser... [2024-10-13 08:02:28,130 INFO L274 PluginConnector]: CDTParser initialized [2024-10-13 08:02:28,131 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--cdc_eem.ko-entry_point.cil.out.i [2024-10-13 08:02:29,752 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-10-13 08:02:30,187 INFO L384 CDTParser]: Found 1 translation units. [2024-10-13 08:02:30,188 INFO L180 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--cdc_eem.ko-entry_point.cil.out.i [2024-10-13 08:02:30,235 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0abfe917c/5b10ca258eda41548a3296d9a11d509b/FLAGc9f4f897c [2024-10-13 08:02:30,250 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0abfe917c/5b10ca258eda41548a3296d9a11d509b [2024-10-13 08:02:30,252 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-10-13 08:02:30,253 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-10-13 08:02:30,254 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-10-13 08:02:30,254 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-10-13 08:02:30,260 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-10-13 08:02:30,261 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.10 08:02:30" (1/1) ... [2024-10-13 08:02:30,262 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5a9b9c8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.10 08:02:30, skipping insertion in model container [2024-10-13 08:02:30,262 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.10 08:02:30" (1/1) ... [2024-10-13 08:02:30,358 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-10-13 08:02:31,149 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--cdc_eem.ko-entry_point.cil.out.i[161556,161569] [2024-10-13 08:02:31,553 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-10-13 08:02:31,592 INFO L197 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2024-10-13 08:02:31,641 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-10-13 08:02:31,783 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--cdc_eem.ko-entry_point.cil.out.i[161556,161569] [2024-10-13 08:02:31,856 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-10-13 08:02:31,869 INFO L200 MainTranslator]: Completed pre-run [2024-10-13 08:02:32,024 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("bswapl %0": "=r" (val): "0" (val)); [5489] [2024-10-13 08:02:32,037 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--cdc_eem.ko-entry_point.cil.out.i[161556,161569] [2024-10-13 08:02:32,114 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-10-13 08:02:32,189 INFO L204 MainTranslator]: Completed translation [2024-10-13 08:02:32,190 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.10 08:02:32 WrapperNode [2024-10-13 08:02:32,190 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-10-13 08:02:32,192 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-10-13 08:02:32,192 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-10-13 08:02:32,192 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-10-13 08:02:32,199 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.10 08:02:32" (1/1) ... [2024-10-13 08:02:32,244 ERROR L1136 TypeChecker]: C: descriptor.function = "eem_rx_fixup" [5955]: Variable #t~ret126 modified in procedure eem_rx_fixup but not declared [2024-10-13 08:02:32,245 ERROR L1136 TypeChecker]: C: descriptor.function = "eem_rx_fixup" [5955]: Undeclared identifier #t~ret126 in IdentifierExpression[#t~ret126,] [2024-10-13 08:02:32,245 ERROR L1136 TypeChecker]: C: descriptor.function = "eem_rx_fixup" [5955]: Wrong parameter type at index 0: CallStatement[null,false,[],write~$Pointer$,[IdentifierExpression[#t~ret126,],StructConstructor[[base,offset],[StructAccessExpression[IdentifierExpression[~#descriptor~0,],base],FunctionApplication[~bvadd~64,[BitvecLiteral[8,64],StructAccessExpression[IdentifierExpression[~#descriptor~0,],offset]]]]],BitvecLiteral[8,64]]] [2024-10-13 08:02:32,245 ERROR L1136 TypeChecker]: C: descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/155/dscv_tempdir/dscv/ri/205_9a/drivers/net/usb/cdc_eem.o.c.prepared" [5956]: Variable #t~ret127 modified in procedure eem_rx_fixup but not declared [2024-10-13 08:02:32,245 ERROR L1136 TypeChecker]: C: descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/155/dscv_tempdir/dscv/ri/205_9a/drivers/net/usb/cdc_eem.o.c.prepared" [5956]: Undeclared identifier #t~ret127 in IdentifierExpression[#t~ret127,] [2024-10-13 08:02:32,245 ERROR L1136 TypeChecker]: C: descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/155/dscv_tempdir/dscv/ri/205_9a/drivers/net/usb/cdc_eem.o.c.prepared" [5956]: Wrong parameter type at index 0: CallStatement[null,false,[],write~$Pointer$,[IdentifierExpression[#t~ret127,],StructConstructor[[base,offset],[StructAccessExpression[IdentifierExpression[~#descriptor~0,],base],FunctionApplication[~bvadd~64,[BitvecLiteral[16,64],StructAccessExpression[IdentifierExpression[~#descriptor~0,],offset]]]]],BitvecLiteral[8,64]]] [2024-10-13 08:02:32,246 ERROR L1136 TypeChecker]: C: descriptor.format = "reserved command %04x\n" [5957]: Variable #t~ret128 modified in procedure eem_rx_fixup but not declared [2024-10-13 08:02:32,246 ERROR L1136 TypeChecker]: C: descriptor.format = "reserved command %04x\n" [5957]: Undeclared identifier #t~ret128 in IdentifierExpression[#t~ret128,] [2024-10-13 08:02:32,246 ERROR L1136 TypeChecker]: C: descriptor.format = "reserved command %04x\n" [5957]: Wrong parameter type at index 0: CallStatement[null,false,[],write~$Pointer$,[IdentifierExpression[#t~ret128,],StructConstructor[[base,offset],[StructAccessExpression[IdentifierExpression[~#descriptor~0,],base],FunctionApplication[~bvadd~64,[BitvecLiteral[24,64],StructAccessExpression[IdentifierExpression[~#descriptor~0,],offset]]]]],BitvecLiteral[8,64]]] [2024-10-13 08:02:32,251 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.10 08:02:32" (1/1) ... [2024-10-13 08:02:32,256 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-10-13 08:02:32,256 INFO L186 ToolchainWalker]: Toolchain execution was canceled (user or tool) before executing de.uni_freiburg.informatik.ultimate.boogie.preprocessor [2024-10-13 08:02:32,258 INFO L158 Benchmark]: Toolchain (without parser) took 2004.10ms. Allocated memory was 75.5MB in the beginning and 107.0MB in the end (delta: 31.5MB). Free memory was 53.4MB in the beginning and 53.5MB in the end (delta: -117.4kB). Peak memory consumption was 31.4MB. Max. memory is 16.1GB. [2024-10-13 08:02:32,260 INFO L158 Benchmark]: CDTParser took 0.36ms. Allocated memory is still 56.6MB. Free memory is still 36.2MB. There was no memory consumed. Max. memory is 16.1GB. [2024-10-13 08:02:32,261 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1936.93ms. Allocated memory was 75.5MB in the beginning and 107.0MB in the end (delta: 31.5MB). Free memory was 53.4MB in the beginning and 56.1MB in the end (delta: -2.7MB). Peak memory consumption was 62.8MB. Max. memory is 16.1GB. [2024-10-13 08:02:32,261 INFO L158 Benchmark]: Boogie Procedure Inliner took 64.14ms. Allocated memory is still 107.0MB. Free memory was 56.1MB in the beginning and 53.5MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2024-10-13 08:02:32,263 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.36ms. Allocated memory is still 56.6MB. Free memory is still 36.2MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1936.93ms. Allocated memory was 75.5MB in the beginning and 107.0MB in the end (delta: 31.5MB). Free memory was 53.4MB in the beginning and 56.1MB in the end (delta: -2.7MB). Peak memory consumption was 62.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 64.14ms. Allocated memory is still 107.0MB. Free memory was 56.1MB in the beginning and 53.5MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - TypeErrorResult [Line: 5955]: Type Error Variable #t~ret126 modified in procedure eem_rx_fixup but not declared - TypeErrorResult [Line: 5955]: Type Error Undeclared identifier #t~ret126 in IdentifierExpression[#t~ret126,] - TypeErrorResult [Line: 5955]: Type Error Wrong parameter type at index 0: CallStatement[null,false,[],write~$Pointer$,[IdentifierExpression[#t~ret126,],StructConstructor[[base,offset],[StructAccessExpression[IdentifierExpression[~#descriptor~0,],base],FunctionApplication[~bvadd~64,[BitvecLiteral[8,64],StructAccessExpression[IdentifierExpression[~#descriptor~0,],offset]]]]],BitvecLiteral[8,64]]] - TypeErrorResult [Line: 5956]: Type Error Variable #t~ret127 modified in procedure eem_rx_fixup but not declared - TypeErrorResult [Line: 5956]: Type Error Undeclared identifier #t~ret127 in IdentifierExpression[#t~ret127,] - TypeErrorResult [Line: 5956]: Type Error Wrong parameter type at index 0: CallStatement[null,false,[],write~$Pointer$,[IdentifierExpression[#t~ret127,],StructConstructor[[base,offset],[StructAccessExpression[IdentifierExpression[~#descriptor~0,],base],FunctionApplication[~bvadd~64,[BitvecLiteral[16,64],StructAccessExpression[IdentifierExpression[~#descriptor~0,],offset]]]]],BitvecLiteral[8,64]]] - TypeErrorResult [Line: 5957]: Type Error Variable #t~ret128 modified in procedure eem_rx_fixup but not declared - TypeErrorResult [Line: 5957]: Type Error Undeclared identifier #t~ret128 in IdentifierExpression[#t~ret128,] - TypeErrorResult [Line: 5957]: Type Error Wrong parameter type at index 0: CallStatement[null,false,[],write~$Pointer$,[IdentifierExpression[#t~ret128,],StructConstructor[[base,offset],[StructAccessExpression[IdentifierExpression[~#descriptor~0,],base],FunctionApplication[~bvadd~64,[BitvecLiteral[24,64],StructAccessExpression[IdentifierExpression[~#descriptor~0,],offset]]]]],BitvecLiteral[8,64]]] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 5489]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("bswapl %0": "=r" (val): "0" (val)); [5489] RESULT: Ultimate could not prove your program: Toolchain returned no result. Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: ERROR: TYPE ERROR