./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-consumption/32_7a_cilled_linux-3.8-rc1-drivers--char--ipmi--ipmi_msghandler.ko-main.cil.out.i --full-output -ea --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 03d7b7b3 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-consumption/32_7a_cilled_linux-3.8-rc1-drivers--char--ipmi--ipmi_msghandler.ko-main.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 19525e6f83ed492183d9a21eaa90e9685989ff90c55473d8827091d7561f2601 --- Real Ultimate output --- This is Ultimate 0.2.2-dev-03d7b7b [2022-02-20 21:44:32,119 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-02-20 21:44:32,121 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-02-20 21:44:32,145 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-02-20 21:44:32,146 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-02-20 21:44:32,147 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-02-20 21:44:32,148 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-02-20 21:44:32,149 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-02-20 21:44:32,151 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-02-20 21:44:32,151 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-02-20 21:44:32,152 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-02-20 21:44:32,153 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-02-20 21:44:32,154 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-02-20 21:44:32,154 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-02-20 21:44:32,155 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-02-20 21:44:32,156 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-02-20 21:44:32,157 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-02-20 21:44:32,157 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-02-20 21:44:32,159 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-02-20 21:44:32,160 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-02-20 21:44:32,161 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-02-20 21:44:32,162 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-02-20 21:44:32,163 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-02-20 21:44:32,164 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-02-20 21:44:32,167 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-02-20 21:44:32,167 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-02-20 21:44:32,167 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-02-20 21:44:32,168 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-02-20 21:44:32,168 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-02-20 21:44:32,169 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-02-20 21:44:32,169 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-02-20 21:44:32,170 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-02-20 21:44:32,171 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-02-20 21:44:32,171 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-02-20 21:44:32,172 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-02-20 21:44:32,173 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-02-20 21:44:32,173 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-02-20 21:44:32,173 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-02-20 21:44:32,174 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-02-20 21:44:32,174 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-02-20 21:44:32,175 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-02-20 21:44:32,176 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2022-02-20 21:44:32,199 INFO L113 SettingsManager]: Loading preferences was successful [2022-02-20 21:44:32,206 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-02-20 21:44:32,207 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-02-20 21:44:32,207 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-02-20 21:44:32,208 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-02-20 21:44:32,208 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-02-20 21:44:32,209 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-02-20 21:44:32,209 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-02-20 21:44:32,209 INFO L138 SettingsManager]: * Use SBE=true [2022-02-20 21:44:32,209 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-02-20 21:44:32,210 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-02-20 21:44:32,210 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-02-20 21:44:32,211 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-02-20 21:44:32,211 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-02-20 21:44:32,211 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-02-20 21:44:32,211 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-02-20 21:44:32,211 INFO L138 SettingsManager]: * Use constant arrays=true [2022-02-20 21:44:32,211 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-02-20 21:44:32,212 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-02-20 21:44:32,212 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-02-20 21:44:32,212 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-02-20 21:44:32,212 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 21:44:32,212 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-02-20 21:44:32,213 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-02-20 21:44:32,213 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-02-20 21:44:32,213 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-02-20 21:44:32,213 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-02-20 21:44:32,213 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-02-20 21:44:32,214 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-02-20 21:44:32,214 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-02-20 21:44:32,214 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 19525e6f83ed492183d9a21eaa90e9685989ff90c55473d8827091d7561f2601 [2022-02-20 21:44:32,435 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-02-20 21:44:32,457 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-02-20 21:44:32,460 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-02-20 21:44:32,462 INFO L271 PluginConnector]: Initializing CDTParser... [2022-02-20 21:44:32,462 INFO L275 PluginConnector]: CDTParser initialized [2022-02-20 21:44:32,463 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-consumption/32_7a_cilled_linux-3.8-rc1-drivers--char--ipmi--ipmi_msghandler.ko-main.cil.out.i [2022-02-20 21:44:32,523 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/68e5478bd/1810e4b1049d4eb1821bc7f157e818ef/FLAGf18c315bc [2022-02-20 21:44:33,287 INFO L306 CDTParser]: Found 1 translation units. [2022-02-20 21:44:33,288 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-consumption/32_7a_cilled_linux-3.8-rc1-drivers--char--ipmi--ipmi_msghandler.ko-main.cil.out.i [2022-02-20 21:44:33,342 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/68e5478bd/1810e4b1049d4eb1821bc7f157e818ef/FLAGf18c315bc [2022-02-20 21:44:33,851 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/68e5478bd/1810e4b1049d4eb1821bc7f157e818ef [2022-02-20 21:44:33,854 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-02-20 21:44:33,855 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-02-20 21:44:33,856 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-02-20 21:44:33,856 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-02-20 21:44:33,858 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-02-20 21:44:33,859 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 09:44:33" (1/1) ... [2022-02-20 21:44:33,861 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@33a3811 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:44:33, skipping insertion in model container [2022-02-20 21:44:33,861 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 09:44:33" (1/1) ... [2022-02-20 21:44:33,865 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-02-20 21:44:33,975 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-02-20 21:44:36,173 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-consumption/32_7a_cilled_linux-3.8-rc1-drivers--char--ipmi--ipmi_msghandler.ko-main.cil.out.i[265597,265610] [2022-02-20 21:44:36,412 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 21:44:36,446 INFO L203 MainTranslator]: Completed pre-run [2022-02-20 21:44:36,878 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-consumption/32_7a_cilled_linux-3.8-rc1-drivers--char--ipmi--ipmi_msghandler.ko-main.cil.out.i[265597,265610] [2022-02-20 21:44:36,894 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 21:44:36,989 INFO L208 MainTranslator]: Completed translation [2022-02-20 21:44:36,990 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:44:36 WrapperNode [2022-02-20 21:44:36,991 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-02-20 21:44:36,992 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-02-20 21:44:36,992 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-02-20 21:44:36,992 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-02-20 21:44:36,998 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:44:36" (1/1) ... [2022-02-20 21:44:37,097 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:44:36" (1/1) ... [2022-02-20 21:44:37,280 INFO L137 Inliner]: procedures = 389, calls = 2919, calls flagged for inlining = 156, calls inlined = 64, statements flattened = 3344 [2022-02-20 21:44:37,280 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-02-20 21:44:37,281 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-02-20 21:44:37,281 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-02-20 21:44:37,282 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-02-20 21:44:37,289 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:44:36" (1/1) ... [2022-02-20 21:44:37,289 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:44:36" (1/1) ... [2022-02-20 21:44:37,334 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:44:36" (1/1) ... [2022-02-20 21:44:37,335 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:44:36" (1/1) ... [2022-02-20 21:44:37,437 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:44:36" (1/1) ... [2022-02-20 21:44:37,463 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:44:36" (1/1) ... [2022-02-20 21:44:37,520 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:44:36" (1/1) ... [2022-02-20 21:44:37,557 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-02-20 21:44:37,558 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-02-20 21:44:37,559 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-02-20 21:44:37,559 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-02-20 21:44:37,560 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:44:36" (1/1) ... [2022-02-20 21:44:37,566 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 21:44:37,576 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 21:44:37,625 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-02-20 21:44:37,646 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-02-20 21:44:37,661 INFO L130 BoogieDeclarations]: Found specification of procedure smi_stats_proc_open [2022-02-20 21:44:37,662 INFO L138 BoogieDeclarations]: Found implementation of procedure smi_stats_proc_open [2022-02-20 21:44:37,662 INFO L130 BoogieDeclarations]: Found specification of procedure debug_lockdep_rcu_enabled [2022-02-20 21:44:37,662 INFO L138 BoogieDeclarations]: Found implementation of procedure debug_lockdep_rcu_enabled [2022-02-20 21:44:37,662 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-02-20 21:44:37,663 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-02-20 21:44:37,663 INFO L130 BoogieDeclarations]: Found specification of procedure ipmi_poll [2022-02-20 21:44:37,663 INFO L138 BoogieDeclarations]: Found implementation of procedure ipmi_poll [2022-02-20 21:44:37,663 INFO L130 BoogieDeclarations]: Found specification of procedure format_lan_msg [2022-02-20 21:44:37,663 INFO L138 BoogieDeclarations]: Found implementation of procedure format_lan_msg [2022-02-20 21:44:37,663 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~int~TO~VOID [2022-02-20 21:44:37,663 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~int~TO~VOID [2022-02-20 21:44:37,664 INFO L130 BoogieDeclarations]: Found specification of procedure copy_event_into_recv_msg [2022-02-20 21:44:37,664 INFO L138 BoogieDeclarations]: Found implementation of procedure copy_event_into_recv_msg [2022-02-20 21:44:37,664 INFO L130 BoogieDeclarations]: Found specification of procedure ipmi_panic_request_and_wait [2022-02-20 21:44:37,664 INFO L138 BoogieDeclarations]: Found implementation of procedure ipmi_panic_request_and_wait [2022-02-20 21:44:37,664 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2022-02-20 21:44:37,664 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2022-02-20 21:44:37,664 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_mutex_unlock_cmd_rcvrs_mutex_of_ipmi_smi [2022-02-20 21:44:37,665 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_mutex_unlock_cmd_rcvrs_mutex_of_ipmi_smi [2022-02-20 21:44:37,665 INFO L130 BoogieDeclarations]: Found specification of procedure remove_proc_entry [2022-02-20 21:44:37,665 INFO L138 BoogieDeclarations]: Found implementation of procedure remove_proc_entry [2022-02-20 21:44:37,665 INFO L130 BoogieDeclarations]: Found specification of procedure platform_device_unregister [2022-02-20 21:44:37,665 INFO L138 BoogieDeclarations]: Found implementation of procedure platform_device_unregister [2022-02-20 21:44:37,665 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2022-02-20 21:44:37,666 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2022-02-20 21:44:37,666 INFO L130 BoogieDeclarations]: Found specification of procedure intf_next_seq [2022-02-20 21:44:37,666 INFO L138 BoogieDeclarations]: Found implementation of procedure intf_next_seq [2022-02-20 21:44:37,666 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-02-20 21:44:37,666 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_mutex_lock_cmd_rcvrs_mutex_of_ipmi_smi [2022-02-20 21:44:37,666 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_mutex_lock_cmd_rcvrs_mutex_of_ipmi_smi [2022-02-20 21:44:37,666 INFO L130 BoogieDeclarations]: Found specification of procedure PDE [2022-02-20 21:44:37,667 INFO L138 BoogieDeclarations]: Found implementation of procedure PDE [2022-02-20 21:44:37,667 INFO L130 BoogieDeclarations]: Found specification of procedure list_del [2022-02-20 21:44:37,667 INFO L138 BoogieDeclarations]: Found implementation of procedure list_del [2022-02-20 21:44:37,667 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2022-02-20 21:44:37,667 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2022-02-20 21:44:37,667 INFO L130 BoogieDeclarations]: Found specification of procedure i_ipmi_request [2022-02-20 21:44:37,667 INFO L138 BoogieDeclarations]: Found implementation of procedure i_ipmi_request [2022-02-20 21:44:37,668 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2022-02-20 21:44:37,668 INFO L130 BoogieDeclarations]: Found specification of procedure free_smi_msg_list [2022-02-20 21:44:37,668 INFO L138 BoogieDeclarations]: Found implementation of procedure free_smi_msg_list [2022-02-20 21:44:37,668 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2022-02-20 21:44:37,668 INFO L130 BoogieDeclarations]: Found specification of procedure kref_get [2022-02-20 21:44:37,668 INFO L138 BoogieDeclarations]: Found implementation of procedure kref_get [2022-02-20 21:44:37,668 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-02-20 21:44:37,669 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2022-02-20 21:44:37,669 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2022-02-20 21:44:37,669 INFO L130 BoogieDeclarations]: Found specification of procedure maintenance_mode_update [2022-02-20 21:44:37,669 INFO L138 BoogieDeclarations]: Found implementation of procedure maintenance_mode_update [2022-02-20 21:44:37,669 INFO L130 BoogieDeclarations]: Found specification of procedure list_add_tail [2022-02-20 21:44:37,669 INFO L138 BoogieDeclarations]: Found implementation of procedure list_add_tail [2022-02-20 21:44:37,669 INFO L130 BoogieDeclarations]: Found specification of procedure kref_put [2022-02-20 21:44:37,670 INFO L138 BoogieDeclarations]: Found implementation of procedure kref_put [2022-02-20 21:44:37,670 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_read_lock [2022-02-20 21:44:37,670 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_read_lock [2022-02-20 21:44:37,670 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-02-20 21:44:37,670 INFO L130 BoogieDeclarations]: Found specification of procedure smi_version_proc_open [2022-02-20 21:44:37,670 INFO L138 BoogieDeclarations]: Found implementation of procedure smi_version_proc_open [2022-02-20 21:44:37,671 INFO L130 BoogieDeclarations]: Found specification of procedure __list_add [2022-02-20 21:44:37,671 INFO L138 BoogieDeclarations]: Found implementation of procedure __list_add [2022-02-20 21:44:37,672 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-02-20 21:44:37,672 INFO L130 BoogieDeclarations]: Found specification of procedure send_channel_info_cmd [2022-02-20 21:44:37,672 INFO L138 BoogieDeclarations]: Found implementation of procedure send_channel_info_cmd [2022-02-20 21:44:37,672 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-02-20 21:44:37,672 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_percpu_size [2022-02-20 21:44:37,672 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2022-02-20 21:44:37,672 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2022-02-20 21:44:37,673 INFO L130 BoogieDeclarations]: Found specification of procedure ipmi_alloc_smi_msg [2022-02-20 21:44:37,673 INFO L138 BoogieDeclarations]: Found implementation of procedure ipmi_alloc_smi_msg [2022-02-20 21:44:37,673 INFO L130 BoogieDeclarations]: Found specification of procedure mod_timer [2022-02-20 21:44:37,673 INFO L138 BoogieDeclarations]: Found implementation of procedure mod_timer [2022-02-20 21:44:37,674 INFO L130 BoogieDeclarations]: Found specification of procedure list_add [2022-02-20 21:44:37,674 INFO L138 BoogieDeclarations]: Found implementation of procedure list_add [2022-02-20 21:44:37,674 INFO L130 BoogieDeclarations]: Found specification of procedure handle_new_recv_msgs [2022-02-20 21:44:37,674 INFO L138 BoogieDeclarations]: Found implementation of procedure handle_new_recv_msgs [2022-02-20 21:44:37,674 INFO L130 BoogieDeclarations]: Found specification of procedure is_lan_addr [2022-02-20 21:44:37,674 INFO L138 BoogieDeclarations]: Found implementation of procedure is_lan_addr [2022-02-20 21:44:37,674 INFO L130 BoogieDeclarations]: Found specification of procedure warn_slowpath_null [2022-02-20 21:44:37,675 INFO L138 BoogieDeclarations]: Found implementation of procedure warn_slowpath_null [2022-02-20 21:44:37,675 INFO L130 BoogieDeclarations]: Found specification of procedure intf_free [2022-02-20 21:44:37,675 INFO L138 BoogieDeclarations]: Found implementation of procedure intf_free [2022-02-20 21:44:37,675 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-02-20 21:44:37,675 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-02-20 21:44:37,675 INFO L130 BoogieDeclarations]: Found specification of procedure __cmpxchg_wrong_size [2022-02-20 21:44:37,675 INFO L130 BoogieDeclarations]: Found specification of procedure kref_sub [2022-02-20 21:44:37,676 INFO L138 BoogieDeclarations]: Found implementation of procedure kref_sub [2022-02-20 21:44:37,676 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-02-20 21:44:37,676 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-02-20 21:44:37,676 INFO L130 BoogieDeclarations]: Found specification of procedure intf_find_seq [2022-02-20 21:44:37,676 INFO L138 BoogieDeclarations]: Found implementation of procedure intf_find_seq [2022-02-20 21:44:37,677 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_unlock [2022-02-20 21:44:37,677 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_unlock [2022-02-20 21:44:37,677 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-02-20 21:44:37,677 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-02-20 21:44:37,677 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2022-02-20 21:44:37,677 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2022-02-20 21:44:37,677 INFO L130 BoogieDeclarations]: Found specification of procedure ipmi_free_smi_msg [2022-02-20 21:44:37,678 INFO L138 BoogieDeclarations]: Found implementation of procedure ipmi_free_smi_msg [2022-02-20 21:44:37,678 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock [2022-02-20 21:44:37,678 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock [2022-02-20 21:44:37,678 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-02-20 21:44:37,678 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2022-02-20 21:44:37,678 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2022-02-20 21:44:37,678 INFO L130 BoogieDeclarations]: Found specification of procedure proc_mkdir [2022-02-20 21:44:37,679 INFO L138 BoogieDeclarations]: Found implementation of procedure proc_mkdir [2022-02-20 21:44:37,679 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-02-20 21:44:37,679 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-02-20 21:44:37,679 INFO L130 BoogieDeclarations]: Found specification of procedure find_cmd_rcvr [2022-02-20 21:44:37,679 INFO L138 BoogieDeclarations]: Found implementation of procedure find_cmd_rcvr [2022-02-20 21:44:37,679 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2022-02-20 21:44:37,679 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2022-02-20 21:44:37,680 INFO L130 BoogieDeclarations]: Found specification of procedure ipmi_init_msghandler [2022-02-20 21:44:37,680 INFO L138 BoogieDeclarations]: Found implementation of procedure ipmi_init_msghandler [2022-02-20 21:44:37,680 INFO L130 BoogieDeclarations]: Found specification of procedure list_empty [2022-02-20 21:44:37,680 INFO L138 BoogieDeclarations]: Found implementation of procedure list_empty [2022-02-20 21:44:37,680 INFO L130 BoogieDeclarations]: Found specification of procedure clean_up_interface_data [2022-02-20 21:44:37,680 INFO L138 BoogieDeclarations]: Found implementation of procedure clean_up_interface_data [2022-02-20 21:44:37,680 INFO L130 BoogieDeclarations]: Found specification of procedure ipmi_alloc_recv_msg [2022-02-20 21:44:37,681 INFO L138 BoogieDeclarations]: Found implementation of procedure ipmi_alloc_recv_msg [2022-02-20 21:44:37,681 INFO L130 BoogieDeclarations]: Found specification of procedure single_open [2022-02-20 21:44:37,681 INFO L138 BoogieDeclarations]: Found implementation of procedure single_open [2022-02-20 21:44:37,681 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_read_lock_held [2022-02-20 21:44:37,681 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_read_lock_held [2022-02-20 21:44:37,681 INFO L130 BoogieDeclarations]: Found specification of procedure synchronize_rcu [2022-02-20 21:44:37,681 INFO L138 BoogieDeclarations]: Found implementation of procedure synchronize_rcu [2022-02-20 21:44:37,682 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~$Pointer$~X~int~TO~VOID [2022-02-20 21:44:37,682 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~$Pointer$~X~int~TO~VOID [2022-02-20 21:44:37,682 INFO L130 BoogieDeclarations]: Found specification of procedure smi_ipmb_proc_open [2022-02-20 21:44:37,682 INFO L138 BoogieDeclarations]: Found implementation of procedure smi_ipmb_proc_open [2022-02-20 21:44:37,682 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-02-20 21:44:37,682 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-02-20 21:44:37,682 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-02-20 21:44:37,683 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-02-20 21:44:37,683 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-02-20 21:44:37,683 INFO L130 BoogieDeclarations]: Found specification of procedure is_ipmb_addr [2022-02-20 21:44:37,683 INFO L138 BoogieDeclarations]: Found implementation of procedure is_ipmb_addr [2022-02-20 21:44:37,683 INFO L130 BoogieDeclarations]: Found specification of procedure is_ipmb_bcast_addr [2022-02-20 21:44:37,683 INFO L138 BoogieDeclarations]: Found implementation of procedure is_ipmb_bcast_addr [2022-02-20 21:44:37,683 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_is_cpu_idle [2022-02-20 21:44:37,684 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_is_cpu_idle [2022-02-20 21:44:37,684 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_inc [2022-02-20 21:44:37,684 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_inc [2022-02-20 21:44:37,684 INFO L130 BoogieDeclarations]: Found specification of procedure format_ipmb_msg [2022-02-20 21:44:37,684 INFO L138 BoogieDeclarations]: Found implementation of procedure format_ipmb_msg [2022-02-20 21:44:37,684 INFO L130 BoogieDeclarations]: Found specification of procedure lockdep_rcu_suspicious [2022-02-20 21:44:37,684 INFO L138 BoogieDeclarations]: Found implementation of procedure lockdep_rcu_suspicious [2022-02-20 21:44:37,684 INFO L130 BoogieDeclarations]: Found specification of procedure free_recv_msg_list [2022-02-20 21:44:37,685 INFO L138 BoogieDeclarations]: Found implementation of procedure free_recv_msg_list [2022-02-20 21:44:37,685 INFO L130 BoogieDeclarations]: Found specification of procedure current_thread_info [2022-02-20 21:44:37,685 INFO L138 BoogieDeclarations]: Found implementation of procedure current_thread_info [2022-02-20 21:44:37,685 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_dec [2022-02-20 21:44:37,685 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_dec [2022-02-20 21:44:37,685 INFO L130 BoogieDeclarations]: Found specification of procedure __wake_up [2022-02-20 21:44:37,685 INFO L138 BoogieDeclarations]: Found implementation of procedure __wake_up [2022-02-20 21:44:37,685 INFO L130 BoogieDeclarations]: Found specification of procedure ipmb_checksum [2022-02-20 21:44:37,686 INFO L138 BoogieDeclarations]: Found implementation of procedure ipmb_checksum [2022-02-20 21:44:37,686 INFO L130 BoogieDeclarations]: Found specification of procedure deliver_response [2022-02-20 21:44:37,686 INFO L138 BoogieDeclarations]: Found implementation of procedure deliver_response [2022-02-20 21:44:37,686 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_read_unlock [2022-02-20 21:44:37,686 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_read_unlock [2022-02-20 21:44:37,686 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-02-20 21:44:37,686 INFO L130 BoogieDeclarations]: Found specification of procedure ipmi_free_recv_msg [2022-02-20 21:44:37,687 INFO L138 BoogieDeclarations]: Found implementation of procedure ipmi_free_recv_msg [2022-02-20 21:44:37,687 INFO L130 BoogieDeclarations]: Found specification of procedure strncpy [2022-02-20 21:44:37,687 INFO L130 BoogieDeclarations]: Found specification of procedure device_remove_file [2022-02-20 21:44:37,687 INFO L138 BoogieDeclarations]: Found implementation of procedure device_remove_file [2022-02-20 21:44:38,221 INFO L234 CfgBuilder]: Building ICFG [2022-02-20 21:44:38,226 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-02-20 21:44:46,387 INFO L275 CfgBuilder]: Performing block encoding [2022-02-20 21:44:46,404 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-02-20 21:44:46,404 INFO L299 CfgBuilder]: Removed 0 assume(true) statements. [2022-02-20 21:44:46,407 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 09:44:46 BoogieIcfgContainer [2022-02-20 21:44:46,407 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-02-20 21:44:46,409 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-02-20 21:44:46,409 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-02-20 21:44:46,411 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-02-20 21:44:46,412 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.02 09:44:33" (1/3) ... [2022-02-20 21:44:46,412 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4aa2c5a7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 09:44:46, skipping insertion in model container [2022-02-20 21:44:46,412 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:44:36" (2/3) ... [2022-02-20 21:44:46,413 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4aa2c5a7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 09:44:46, skipping insertion in model container [2022-02-20 21:44:46,413 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 09:44:46" (3/3) ... [2022-02-20 21:44:46,414 INFO L111 eAbstractionObserver]: Analyzing ICFG 32_7a_cilled_linux-3.8-rc1-drivers--char--ipmi--ipmi_msghandler.ko-main.cil.out.i [2022-02-20 21:44:46,418 INFO L205 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-02-20 21:44:46,418 INFO L164 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-02-20 21:44:46,475 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-02-20 21:44:46,483 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-02-20 21:44:46,484 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-02-20 21:44:46,546 INFO L276 IsEmpty]: Start isEmpty. Operand has 1250 states, 870 states have (on average 1.3781609195402298) internal successors, (1199), 920 states have internal predecessors, (1199), 304 states have call successors, (304), 74 states have call predecessors, (304), 74 states have return successors, (304), 298 states have call predecessors, (304), 304 states have call successors, (304) [2022-02-20 21:44:46,552 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2022-02-20 21:44:46,553 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 21:44:46,553 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 21:44:46,554 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 21:44:46,558 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 21:44:46,558 INFO L85 PathProgramCache]: Analyzing trace with hash -1353827036, now seen corresponding path program 1 times [2022-02-20 21:44:46,566 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 21:44:46,567 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1625372894] [2022-02-20 21:44:46,567 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 21:44:46,568 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 21:44:46,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 21:44:47,097 INFO L290 TraceCheckUtils]: 0: Hoare triple {1253#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(82, 2);call #Ultimate.allocInit(25, 3);call #Ultimate.allocInit(42, 4);call #Ultimate.allocInit(25, 5);call #Ultimate.allocInit(44, 6);call #Ultimate.allocInit(21, 7);call #Ultimate.allocInit(21, 8);call #Ultimate.allocInit(5, 9);call write~init~int(105, 9, 0, 1);call write~init~int(112, 9, 1, 1);call write~init~int(109, 9, 2, 1);call write~init~int(105, 9, 3, 1);call write~init~int(0, 9, 4, 1);call #Ultimate.allocInit(27, 10);call #Ultimate.allocInit(17, 11);call #Ultimate.allocInit(32, 12);call #Ultimate.allocInit(22, 13);call #Ultimate.allocInit(29, 14);call #Ultimate.allocInit(19, 15);call #Ultimate.allocInit(51, 16);call #Ultimate.allocInit(3, 17);call write~init~int(37, 17, 0, 1);call write~init~int(120, 17, 1, 1);call write~init~int(0, 17, 2, 1);call #Ultimate.allocInit(4, 18);call write~init~int(32, 18, 0, 1);call write~init~int(37, 18, 1, 1);call write~init~int(120, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(7, 19);call write~init~int(37, 19, 0, 1);call write~init~int(117, 19, 1, 1);call write~init~int(46, 19, 2, 1);call write~init~int(37, 19, 3, 1);call write~init~int(117, 19, 4, 1);call write~init~int(10, 19, 5, 1);call write~init~int(0, 19, 6, 1);call #Ultimate.allocInit(33, 20);call #Ultimate.allocInit(33, 21);call #Ultimate.allocInit(33, 22);call #Ultimate.allocInit(33, 23);call #Ultimate.allocInit(33, 24);call #Ultimate.allocInit(33, 25);call #Ultimate.allocInit(33, 26);call #Ultimate.allocInit(33, 27);call #Ultimate.allocInit(33, 28);call #Ultimate.allocInit(33, 29);call #Ultimate.allocInit(33, 30);call #Ultimate.allocInit(33, 31);call #Ultimate.allocInit(33, 32);call #Ultimate.allocInit(33, 33);call #Ultimate.allocInit(33, 34);call #Ultimate.allocInit(33, 35);call #Ultimate.allocInit(33, 36);call #Ultimate.allocInit(33, 37);call #Ultimate.allocInit(33, 38);call #Ultimate.allocInit(33, 39);call #Ultimate.allocInit(33, 40);call #Ultimate.allocInit(33, 41);call #Ultimate.allocInit(33, 42);call #Ultimate.allocInit(33, 43);call #Ultimate.allocInit(33, 44);call #Ultimate.allocInit(33, 45);call #Ultimate.allocInit(33, 46);call #Ultimate.allocInit(33, 47);call #Ultimate.allocInit(3, 48);call write~init~int(37, 48, 0, 1);call write~init~int(100, 48, 1, 1);call write~init~int(0, 48, 2, 1);call #Ultimate.allocInit(6, 49);call write~init~int(115, 49, 0, 1);call write~init~int(116, 49, 1, 1);call write~init~int(97, 49, 2, 1);call write~init~int(116, 49, 3, 1);call write~init~int(115, 49, 4, 1);call write~init~int(0, 49, 5, 1);call #Ultimate.allocInit(5, 50);call write~init~int(105, 50, 0, 1);call write~init~int(112, 50, 1, 1);call write~init~int(109, 50, 2, 1);call write~init~int(98, 50, 3, 1);call write~init~int(0, 50, 4, 1);call #Ultimate.allocInit(8, 51);call #Ultimate.allocInit(4, 52);call write~init~int(37, 52, 0, 1);call write~init~int(117, 52, 1, 1);call write~init~int(10, 52, 2, 1);call write~init~int(0, 52, 3, 1);call #Ultimate.allocInit(4, 53);call write~init~int(37, 53, 0, 1);call write~init~int(117, 53, 1, 1);call write~init~int(10, 53, 2, 1);call write~init~int(0, 53, 3, 1);call #Ultimate.allocInit(4, 54);call write~init~int(37, 54, 0, 1);call write~init~int(117, 54, 1, 1);call write~init~int(10, 54, 2, 1);call write~init~int(0, 54, 3, 1);call #Ultimate.allocInit(7, 55);call write~init~int(37, 55, 0, 1);call write~init~int(117, 55, 1, 1);call write~init~int(46, 55, 2, 1);call write~init~int(37, 55, 3, 1);call write~init~int(120, 55, 4, 1);call write~init~int(10, 55, 5, 1);call write~init~int(0, 55, 6, 1);call #Ultimate.allocInit(7, 56);call write~init~int(37, 56, 0, 1);call write~init~int(117, 56, 1, 1);call write~init~int(46, 56, 2, 1);call write~init~int(37, 56, 3, 1);call write~init~int(117, 56, 4, 1);call write~init~int(10, 56, 5, 1);call write~init~int(0, 56, 6, 1);call #Ultimate.allocInit(8, 57);call #Ultimate.allocInit(9, 58);call #Ultimate.allocInit(9, 59);call #Ultimate.allocInit(29, 60);call #Ultimate.allocInit(8, 61);call #Ultimate.allocInit(10, 62);call #Ultimate.allocInit(21, 63);call #Ultimate.allocInit(9, 64);call #Ultimate.allocInit(18, 65);call #Ultimate.allocInit(13, 66);call #Ultimate.allocInit(26, 67);call #Ultimate.allocInit(16, 68);call #Ultimate.allocInit(11, 69);call #Ultimate.allocInit(5, 70);call write~init~int(103, 70, 0, 1);call write~init~int(117, 70, 1, 1);call write~init~int(105, 70, 2, 1);call write~init~int(100, 70, 3, 1);call write~init~int(0, 70, 4, 1);call #Ultimate.allocInit(22, 71);call #Ultimate.allocInit(86, 72);call #Ultimate.allocInit(15, 73);call #Ultimate.allocInit(224, 74);call #Ultimate.allocInit(43, 75);call #Ultimate.allocInit(54, 76);call #Ultimate.allocInit(53, 77);call #Ultimate.allocInit(68, 78);call #Ultimate.allocInit(44, 79);call #Ultimate.allocInit(52, 80);call #Ultimate.allocInit(7, 81);call write~init~int(105, 81, 0, 1);call write~init~int(112, 81, 1, 1);call write~init~int(109, 81, 2, 1);call write~init~int(105, 81, 3, 1);call write~init~int(37, 81, 4, 1);call write~init~int(100, 81, 5, 1);call write~init~int(0, 81, 6, 1);call #Ultimate.allocInit(46, 82);call #Ultimate.allocInit(7, 83);call write~init~int(105, 83, 0, 1);call write~init~int(112, 83, 1, 1);call write~init~int(109, 83, 2, 1);call write~init~int(105, 83, 3, 1);call write~init~int(37, 83, 4, 1);call write~init~int(100, 83, 5, 1);call write~init~int(0, 83, 6, 1);call #Ultimate.allocInit(55, 84);call #Ultimate.allocInit(152, 85);call #Ultimate.allocInit(62, 86);call #Ultimate.allocInit(26, 87);call #Ultimate.allocInit(23, 88);call #Ultimate.allocInit(35, 89);call #Ultimate.allocInit(29, 90);call #Ultimate.allocInit(23, 91);call #Ultimate.allocInit(39, 92);call #Ultimate.allocInit(13, 93);call #Ultimate.allocInit(69, 94);call #Ultimate.allocInit(162, 95);call #Ultimate.allocInit(90, 96);call #Ultimate.allocInit(103, 97);call #Ultimate.allocInit(55, 98);call #Ultimate.allocInit(36, 99);call #Ultimate.allocInit(5, 100);call write~init~int(105, 100, 0, 1);call write~init~int(112, 100, 1, 1);call write~init~int(109, 100, 2, 1);call write~init~int(105, 100, 3, 1);call write~init~int(0, 100, 4, 1);call #Ultimate.allocInit(54, 101);call #Ultimate.allocInit(16, 102);call #Ultimate.allocInit(53, 103);call #Ultimate.allocInit(54, 104);~ldv_state_variable_3~0 := 0;~ldv_state_variable_1~0 := 0;~ldv_state_variable_2~0 := 0;~ldv_state_variable_4~0 := 0;~ref_cnt~0 := 0;~ldv_state_variable_0~0 := 0;~initialized~0 := 0;~proc_ipmi_root~0.base, ~proc_ipmi_root~0.offset := 0, 0;~#ipmidriver~0.base, ~#ipmidriver~0.offset := 105, 0;call #Ultimate.allocInit(161, 105);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, 8 + ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, 16 + ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, 24 + ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, 32 + ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(9, 0, ~#ipmidriver~0.base, 40 + ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(~#platform_bus_type~0.base, ~#platform_bus_type~0.offset, ~#ipmidriver~0.base, 48 + ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, 56 + ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, 64 + ~#ipmidriver~0.offset, 8);call write~init~int(0, ~#ipmidriver~0.base, 72 + ~#ipmidriver~0.offset, 1);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, 73 + ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, 81 + ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, 89 + ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, 97 + ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, 105 + ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, 113 + ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, 121 + ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, 129 + ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, 137 + ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, 145 + ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, 153 + ~#ipmidriver~0.offset, 8);~#ipmidriver_mutex~0.base, ~#ipmidriver_mutex~0.offset := 106, 0;call #Ultimate.allocInit(156, 106);call write~init~int(1, ~#ipmidriver_mutex~0.base, ~#ipmidriver_mutex~0.offset, 4);call write~init~int(0, ~#ipmidriver_mutex~0.base, 4 + ~#ipmidriver_mutex~0.offset, 4);call write~init~int(3735899821, ~#ipmidriver_mutex~0.base, 8 + ~#ipmidriver_mutex~0.offset, 4);call write~init~int(4294967295, ~#ipmidriver_mutex~0.base, 12 + ~#ipmidriver_mutex~0.offset, 4);call write~init~$Pointer$(0, -1, ~#ipmidriver_mutex~0.base, 16 + ~#ipmidriver_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver_mutex~0.base, 24 + ~#ipmidriver_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver_mutex~0.base, 32 + ~#ipmidriver_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver_mutex~0.base, 40 + ~#ipmidriver_mutex~0.offset, 8);call write~init~$Pointer$(10, 0, ~#ipmidriver_mutex~0.base, 48 + ~#ipmidriver_mutex~0.offset, 8);call write~init~int(0, ~#ipmidriver_mutex~0.base, 56 + ~#ipmidriver_mutex~0.offset, 4);call write~init~int(0, ~#ipmidriver_mutex~0.base, 60 + ~#ipmidriver_mutex~0.offset, 8);call write~init~$Pointer$(~#ipmidriver_mutex~0.base, 72 + ~#ipmidriver_mutex~0.offset, ~#ipmidriver_mutex~0.base, 72 + ~#ipmidriver_mutex~0.offset, 8);call write~init~$Pointer$(~#ipmidriver_mutex~0.base, 72 + ~#ipmidriver_mutex~0.offset, ~#ipmidriver_mutex~0.base, 80 + ~#ipmidriver_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver_mutex~0.base, 88 + ~#ipmidriver_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver_mutex~0.base, 96 + ~#ipmidriver_mutex~0.offset, 8);call write~init~$Pointer$(~#ipmidriver_mutex~0.base, ~#ipmidriver_mutex~0.offset, ~#ipmidriver_mutex~0.base, 104 + ~#ipmidriver_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver_mutex~0.base, 112 + ~#ipmidriver_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver_mutex~0.base, 120 + ~#ipmidriver_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver_mutex~0.base, 128 + ~#ipmidriver_mutex~0.offset, 8);call write~init~$Pointer$(11, 0, ~#ipmidriver_mutex~0.base, 136 + ~#ipmidriver_mutex~0.offset, 8);call write~init~int(0, ~#ipmidriver_mutex~0.base, 144 + ~#ipmidriver_mutex~0.offset, 4);call write~init~int(0, ~#ipmidriver_mutex~0.base, 148 + ~#ipmidriver_mutex~0.offset, 8);~#ipmi_interfaces~0.base, ~#ipmi_interfaces~0.offset := 107, 0;call #Ultimate.allocInit(16, 107);call write~init~$Pointer$(~#ipmi_interfaces~0.base, ~#ipmi_interfaces~0.offset, ~#ipmi_interfaces~0.base, ~#ipmi_interfaces~0.offset, 8);call write~init~$Pointer$(~#ipmi_interfaces~0.base, ~#ipmi_interfaces~0.offset, ~#ipmi_interfaces~0.base, 8 + ~#ipmi_interfaces~0.offset, 8);~#ipmi_interfaces_mutex~0.base, ~#ipmi_interfaces_mutex~0.offset := 108, 0;call #Ultimate.allocInit(156, 108);call write~init~int(1, ~#ipmi_interfaces_mutex~0.base, ~#ipmi_interfaces_mutex~0.offset, 4);call write~init~int(0, ~#ipmi_interfaces_mutex~0.base, 4 + ~#ipmi_interfaces_mutex~0.offset, 4);call write~init~int(3735899821, ~#ipmi_interfaces_mutex~0.base, 8 + ~#ipmi_interfaces_mutex~0.offset, 4);call write~init~int(4294967295, ~#ipmi_interfaces_mutex~0.base, 12 + ~#ipmi_interfaces_mutex~0.offset, 4);call write~init~$Pointer$(0, -1, ~#ipmi_interfaces_mutex~0.base, 16 + ~#ipmi_interfaces_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmi_interfaces_mutex~0.base, 24 + ~#ipmi_interfaces_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmi_interfaces_mutex~0.base, 32 + ~#ipmi_interfaces_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmi_interfaces_mutex~0.base, 40 + ~#ipmi_interfaces_mutex~0.offset, 8);call write~init~$Pointer$(12, 0, ~#ipmi_interfaces_mutex~0.base, 48 + ~#ipmi_interfaces_mutex~0.offset, 8);call write~init~int(0, ~#ipmi_interfaces_mutex~0.base, 56 + ~#ipmi_interfaces_mutex~0.offset, 4);call write~init~int(0, ~#ipmi_interfaces_mutex~0.base, 60 + ~#ipmi_interfaces_mutex~0.offset, 8);call write~init~$Pointer$(~#ipmi_interfaces_mutex~0.base, 72 + ~#ipmi_interfaces_mutex~0.offset, ~#ipmi_interfaces_mutex~0.base, 72 + ~#ipmi_interfaces_mutex~0.offset, 8);call write~init~$Pointer$(~#ipmi_interfaces_mutex~0.base, 72 + ~#ipmi_interfaces_mutex~0.offset, ~#ipmi_interfaces_mutex~0.base, 80 + ~#ipmi_interfaces_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmi_interfaces_mutex~0.base, 88 + ~#ipmi_interfaces_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmi_interfaces_mutex~0.base, 96 + ~#ipmi_interfaces_mutex~0.offset, 8);call write~init~$Pointer$(~#ipmi_interfaces_mutex~0.base, ~#ipmi_interfaces_mutex~0.offset, ~#ipmi_interfaces_mutex~0.base, 104 + ~#ipmi_interfaces_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmi_interfaces_mutex~0.base, 112 + ~#ipmi_interfaces_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmi_interfaces_mutex~0.base, 120 + ~#ipmi_interfaces_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmi_interfaces_mutex~0.base, 128 + ~#ipmi_interfaces_mutex~0.offset, 8);call write~init~$Pointer$(13, 0, ~#ipmi_interfaces_mutex~0.base, 136 + ~#ipmi_interfaces_mutex~0.offset, 8);call write~init~int(0, ~#ipmi_interfaces_mutex~0.base, 144 + ~#ipmi_interfaces_mutex~0.offset, 4);call write~init~int(0, ~#ipmi_interfaces_mutex~0.base, 148 + ~#ipmi_interfaces_mutex~0.offset, 8);~#smi_watchers~0.base, ~#smi_watchers~0.offset := 109, 0;call #Ultimate.allocInit(16, 109);call write~init~$Pointer$(~#smi_watchers~0.base, ~#smi_watchers~0.offset, ~#smi_watchers~0.base, ~#smi_watchers~0.offset, 8);call write~init~$Pointer$(~#smi_watchers~0.base, ~#smi_watchers~0.offset, ~#smi_watchers~0.base, 8 + ~#smi_watchers~0.offset, 8);~#smi_watchers_mutex~0.base, ~#smi_watchers_mutex~0.offset := 110, 0;call #Ultimate.allocInit(156, 110);call write~init~int(1, ~#smi_watchers_mutex~0.base, ~#smi_watchers_mutex~0.offset, 4);call write~init~int(0, ~#smi_watchers_mutex~0.base, 4 + ~#smi_watchers_mutex~0.offset, 4);call write~init~int(3735899821, ~#smi_watchers_mutex~0.base, 8 + ~#smi_watchers_mutex~0.offset, 4);call write~init~int(4294967295, ~#smi_watchers_mutex~0.base, 12 + ~#smi_watchers_mutex~0.offset, 4);call write~init~$Pointer$(0, -1, ~#smi_watchers_mutex~0.base, 16 + ~#smi_watchers_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_watchers_mutex~0.base, 24 + ~#smi_watchers_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_watchers_mutex~0.base, 32 + ~#smi_watchers_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_watchers_mutex~0.base, 40 + ~#smi_watchers_mutex~0.offset, 8);call write~init~$Pointer$(14, 0, ~#smi_watchers_mutex~0.base, 48 + ~#smi_watchers_mutex~0.offset, 8);call write~init~int(0, ~#smi_watchers_mutex~0.base, 56 + ~#smi_watchers_mutex~0.offset, 4);call write~init~int(0, ~#smi_watchers_mutex~0.base, 60 + ~#smi_watchers_mutex~0.offset, 8);call write~init~$Pointer$(~#smi_watchers_mutex~0.base, 72 + ~#smi_watchers_mutex~0.offset, ~#smi_watchers_mutex~0.base, 72 + ~#smi_watchers_mutex~0.offset, 8);call write~init~$Pointer$(~#smi_watchers_mutex~0.base, 72 + ~#smi_watchers_mutex~0.offset, ~#smi_watchers_mutex~0.base, 80 + ~#smi_watchers_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_watchers_mutex~0.base, 88 + ~#smi_watchers_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_watchers_mutex~0.base, 96 + ~#smi_watchers_mutex~0.offset, 8);call write~init~$Pointer$(~#smi_watchers_mutex~0.base, ~#smi_watchers_mutex~0.offset, ~#smi_watchers_mutex~0.base, 104 + ~#smi_watchers_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_watchers_mutex~0.base, 112 + ~#smi_watchers_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_watchers_mutex~0.base, 120 + ~#smi_watchers_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_watchers_mutex~0.base, 128 + ~#smi_watchers_mutex~0.offset, 8);call write~init~$Pointer$(15, 0, ~#smi_watchers_mutex~0.base, 136 + ~#smi_watchers_mutex~0.offset, 8);call write~init~int(0, ~#smi_watchers_mutex~0.base, 144 + ~#smi_watchers_mutex~0.offset, 4);call write~init~int(0, ~#smi_watchers_mutex~0.base, 148 + ~#smi_watchers_mutex~0.offset, 8);~#smi_ipmb_proc_ops~0.base, ~#smi_ipmb_proc_ops~0.offset := 111, 0;call #Ultimate.allocInit(216, 111);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(#funAddr~seq_lseek.base, #funAddr~seq_lseek.offset, ~#smi_ipmb_proc_ops~0.base, 8 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(#funAddr~seq_read.base, #funAddr~seq_read.offset, ~#smi_ipmb_proc_ops~0.base, 16 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 24 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 32 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 40 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 48 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 56 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 64 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 72 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 80 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(#funAddr~smi_ipmb_proc_open.base, #funAddr~smi_ipmb_proc_open.offset, ~#smi_ipmb_proc_ops~0.base, 88 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 96 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(#funAddr~single_release.base, #funAddr~single_release.offset, ~#smi_ipmb_proc_ops~0.base, 104 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 112 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 120 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 128 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 136 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 144 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 152 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 160 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 168 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 176 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 184 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 192 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 200 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 208 + ~#smi_ipmb_proc_ops~0.offset, 8);~#smi_version_proc_ops~0.base, ~#smi_version_proc_ops~0.offset := 112, 0;call #Ultimate.allocInit(216, 112);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(#funAddr~seq_lseek.base, #funAddr~seq_lseek.offset, ~#smi_version_proc_ops~0.base, 8 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(#funAddr~seq_read.base, #funAddr~seq_read.offset, ~#smi_version_proc_ops~0.base, 16 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 24 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 32 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 40 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 48 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 56 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 64 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 72 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 80 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(#funAddr~smi_version_proc_open.base, #funAddr~smi_version_proc_open.offset, ~#smi_version_proc_ops~0.base, 88 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 96 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(#funAddr~single_release.base, #funAddr~single_release.offset, ~#smi_version_proc_ops~0.base, 104 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 112 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 120 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 128 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 136 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 144 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 152 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 160 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 168 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 176 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 184 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 192 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 200 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 208 + ~#smi_version_proc_ops~0.offset, 8);~#smi_stats_proc_ops~0.base, ~#smi_stats_proc_ops~0.offset := 113, 0;call #Ultimate.allocInit(216, 113);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(#funAddr~seq_lseek.base, #funAddr~seq_lseek.offset, ~#smi_stats_proc_ops~0.base, 8 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(#funAddr~seq_read.base, #funAddr~seq_read.offset, ~#smi_stats_proc_ops~0.base, 16 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 24 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 32 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 40 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 48 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 56 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 64 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 72 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 80 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(#funAddr~smi_stats_proc_open.base, #funAddr~smi_stats_proc_open.offset, ~#smi_stats_proc_ops~0.base, 88 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 96 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(#funAddr~single_release.base, #funAddr~single_release.offset, ~#smi_stats_proc_ops~0.base, 104 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 112 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 120 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 128 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 136 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 144 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 152 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 160 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 168 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 176 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 184 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 192 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 200 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 208 + ~#smi_stats_proc_ops~0.offset, 8);~#ipmi_timer~0.base, ~#ipmi_timer~0.offset := 114, 0;call #Ultimate.allocInit(124, 114);#memory_$Pointer$.base, #memory_$Pointer$.offset := ~initToZeroAtPointerBaseAddress~$Pointer$.base(#memory_$Pointer$.base, #memory_$Pointer$.offset, ~#ipmi_timer~0.base), ~initToZeroAtPointerBaseAddress~$Pointer$.offset(#memory_$Pointer$.base, #memory_$Pointer$.offset, ~#ipmi_timer~0.base);#memory_int := ~initToZeroAtPointerBaseAddress~int(#memory_int, ~#ipmi_timer~0.base);~#stop_operation~0.base, ~#stop_operation~0.offset := 115, 0;call #Ultimate.allocInit(4, 115);call write~init~int(0, ~#stop_operation~0.base, ~#stop_operation~0.offset, 4);~ticks_to_req_ev~0 := 1;~#smi_msg_inuse_count~0.base, ~#smi_msg_inuse_count~0.offset := 116, 0;call #Ultimate.allocInit(4, 116);call write~init~int(0, ~#smi_msg_inuse_count~0.base, ~#smi_msg_inuse_count~0.offset, 4);~#recv_msg_inuse_count~0.base, ~#recv_msg_inuse_count~0.offset := 117, 0;call #Ultimate.allocInit(4, 117);call write~init~int(0, ~#recv_msg_inuse_count~0.base, ~#recv_msg_inuse_count~0.offset, 4);~#panic_done_count~0.base, ~#panic_done_count~0.offset := 118, 0;call #Ultimate.allocInit(4, 118);call write~init~int(0, ~#panic_done_count~0.base, ~#panic_done_count~0.offset, 4);~has_panicked~0 := 0;~#panic_block~0.base, ~#panic_block~0.offset := 119, 0;call #Ultimate.allocInit(20, 119);call write~init~$Pointer$(#funAddr~panic_event.base, #funAddr~panic_event.offset, ~#panic_block~0.base, ~#panic_block~0.offset, 8);call write~init~$Pointer$(0, 0, ~#panic_block~0.base, 8 + ~#panic_block~0.offset, 8);call write~init~int(200, ~#panic_block~0.base, 16 + ~#panic_block~0.offset, 4);~ldv_retval_ipmi_init_msghandler_mod~0 := 0;~ldv_retval_smi_stats_proc_open~0 := 0;~ldv_retval_smi_version_proc_open~0 := 0;~ldvarg1~0.base, ~ldvarg1~0.offset := 0, 0;~smi_stats_proc_ops_group2~0.base, ~smi_stats_proc_ops_group2~0.offset := 0, 0;~smi_ipmb_proc_ops_group1~0.base, ~smi_ipmb_proc_ops_group1~0.offset := 0, 0;~smi_ipmb_proc_ops_group2~0.base, ~smi_ipmb_proc_ops_group2~0.offset := 0, 0;~ldvarg0~0.base, ~ldvarg0~0.offset := 0, 0;~ldv_retval_smi_ipmb_proc_open~0 := 0;~smi_version_proc_ops_group1~0.base, ~smi_version_proc_ops_group1~0.offset := 0, 0;~smi_version_proc_ops_group2~0.base, ~smi_version_proc_ops_group2~0.offset := 0, 0;~smi_stats_proc_ops_group1~0.base, ~smi_stats_proc_ops_group1~0.offset := 0, 0;~ldvarg2~0 := 0;~ldv_mutex_cmd_rcvrs_mutex_of_ipmi_smi~0 := 0;~ldv_mutex_cred_guard_mutex_of_signal_struct~0 := 0;~ldv_mutex_ipmi_interfaces_mutex~0 := 0;~ldv_mutex_ipmidriver_mutex~0 := 0;~ldv_mutex_lock~0 := 0;~ldv_mutex_mutex_of_device~0 := 0;~ldv_mutex_proc_entry_lock_of_ipmi_smi~0 := 0;~ldv_mutex_smi_watchers_mutex~0 := 0; {1253#true} is VALID [2022-02-20 21:44:47,099 INFO L290 TraceCheckUtils]: 1: Hoare triple {1253#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet1478#1, main_#t~switch1479#1, main_#t~nondet1480#1, main_#t~switch1481#1, main_#t~ret1482#1, main_#t~nondet1483#1, main_#t~switch1484#1, main_#t~ret1485#1, main_#t~ret1486#1, main_#t~nondet1487#1, main_#t~switch1488#1, main_#t~ret1489#1, main_#t~nondet1490#1, main_#t~switch1491#1, main_#t~ret1492#1, main_#t~ret1493#1, main_#t~nondet1494#1, main_#t~switch1495#1, main_#t~ret1496#1, main_#t~ret1497#1, main_~tmp~74#1, main_~tmp___0~42#1, main_~tmp___1~15#1, main_~tmp___2~10#1, main_~tmp___3~7#1, main_~tmp___4~5#1;havoc main_~tmp~74#1;havoc main_~tmp___0~42#1;havoc main_~tmp___1~15#1;havoc main_~tmp___2~10#1;havoc main_~tmp___3~7#1;havoc main_~tmp___4~5#1;assume { :begin_inline_ldv_initialize } true;~ldv_mutex_cmd_rcvrs_mutex_of_ipmi_smi~0 := 1;~ldv_mutex_cred_guard_mutex_of_signal_struct~0 := 1;~ldv_mutex_ipmi_interfaces_mutex~0 := 1;~ldv_mutex_ipmidriver_mutex~0 := 1;~ldv_mutex_lock~0 := 1;~ldv_mutex_mutex_of_device~0 := 1;~ldv_mutex_proc_entry_lock_of_ipmi_smi~0 := 1;~ldv_mutex_smi_watchers_mutex~0 := 1; {1253#true} is VALID [2022-02-20 21:44:47,099 INFO L290 TraceCheckUtils]: 2: Hoare triple {1253#true} assume { :end_inline_ldv_initialize } true;~ldv_state_variable_4~0 := 0;~ldv_state_variable_1~0 := 0;~ref_cnt~0 := 0;~ldv_state_variable_0~0 := 1;~ldv_state_variable_3~0 := 0;~ldv_state_variable_2~0 := 0; {1255#(= ~ldv_state_variable_0~0 1)} is VALID [2022-02-20 21:44:47,100 INFO L290 TraceCheckUtils]: 3: Hoare triple {1255#(= ~ldv_state_variable_0~0 1)} assume -2147483648 <= main_#t~nondet1478#1 && main_#t~nondet1478#1 <= 2147483647;main_~tmp~74#1 := main_#t~nondet1478#1;havoc main_#t~nondet1478#1;main_#t~switch1479#1 := 0 == main_~tmp~74#1; {1255#(= ~ldv_state_variable_0~0 1)} is VALID [2022-02-20 21:44:47,101 INFO L290 TraceCheckUtils]: 4: Hoare triple {1255#(= ~ldv_state_variable_0~0 1)} assume !main_#t~switch1479#1;main_#t~switch1479#1 := main_#t~switch1479#1 || 1 == main_~tmp~74#1; {1255#(= ~ldv_state_variable_0~0 1)} is VALID [2022-02-20 21:44:47,101 INFO L290 TraceCheckUtils]: 5: Hoare triple {1255#(= ~ldv_state_variable_0~0 1)} assume !main_#t~switch1479#1;main_#t~switch1479#1 := main_#t~switch1479#1 || 2 == main_~tmp~74#1; {1255#(= ~ldv_state_variable_0~0 1)} is VALID [2022-02-20 21:44:47,102 INFO L290 TraceCheckUtils]: 6: Hoare triple {1255#(= ~ldv_state_variable_0~0 1)} assume main_#t~switch1479#1; {1255#(= ~ldv_state_variable_0~0 1)} is VALID [2022-02-20 21:44:47,102 INFO L290 TraceCheckUtils]: 7: Hoare triple {1255#(= ~ldv_state_variable_0~0 1)} assume 0 != ~ldv_state_variable_0~0;assume -2147483648 <= main_#t~nondet1487#1 && main_#t~nondet1487#1 <= 2147483647;main_~tmp___2~10#1 := main_#t~nondet1487#1;havoc main_#t~nondet1487#1;main_#t~switch1488#1 := 0 == main_~tmp___2~10#1; {1255#(= ~ldv_state_variable_0~0 1)} is VALID [2022-02-20 21:44:47,103 INFO L290 TraceCheckUtils]: 8: Hoare triple {1255#(= ~ldv_state_variable_0~0 1)} assume main_#t~switch1488#1; {1255#(= ~ldv_state_variable_0~0 1)} is VALID [2022-02-20 21:44:47,103 INFO L290 TraceCheckUtils]: 9: Hoare triple {1255#(= ~ldv_state_variable_0~0 1)} assume 2 == ~ldv_state_variable_0~0 && 0 == ~ref_cnt~0;assume { :begin_inline_cleanup_ipmi } true;havoc cleanup_ipmi_#t~ret1472#1, cleanup_ipmi_#t~ret1473#1, cleanup_ipmi_#t~ret1474#1, cleanup_ipmi_#t~nondet1475#1, cleanup_ipmi_#t~ret1476#1, cleanup_ipmi_#t~nondet1477#1, cleanup_ipmi_~count~0#1;havoc cleanup_ipmi_~count~0#1; {1254#false} is VALID [2022-02-20 21:44:47,103 INFO L290 TraceCheckUtils]: 10: Hoare triple {1254#false} assume 0 == ~initialized~0; {1254#false} is VALID [2022-02-20 21:44:47,104 INFO L290 TraceCheckUtils]: 11: Hoare triple {1254#false} assume { :end_inline_cleanup_ipmi } true;~ldv_state_variable_0~0 := 3; {1254#false} is VALID [2022-02-20 21:44:47,104 INFO L290 TraceCheckUtils]: 12: Hoare triple {1254#false} assume { :begin_inline_ldv_check_final_state } true; {1254#false} is VALID [2022-02-20 21:44:47,104 INFO L290 TraceCheckUtils]: 13: Hoare triple {1254#false} assume !(1 == ~ldv_mutex_cmd_rcvrs_mutex_of_ipmi_smi~0); {1254#false} is VALID [2022-02-20 21:44:47,104 INFO L272 TraceCheckUtils]: 14: Hoare triple {1254#false} call ldv_error(); {1254#false} is VALID [2022-02-20 21:44:47,105 INFO L290 TraceCheckUtils]: 15: Hoare triple {1254#false} assume !false; {1254#false} is VALID [2022-02-20 21:44:47,106 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 21:44:47,106 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 21:44:47,107 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1625372894] [2022-02-20 21:44:47,107 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1625372894] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 21:44:47,107 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 21:44:47,108 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 21:44:47,109 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1226372886] [2022-02-20 21:44:47,110 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 21:44:47,114 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2022-02-20 21:44:47,116 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 21:44:47,118 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 21:44:47,162 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 16 edges. 16 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 21:44:47,163 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 21:44:47,163 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 21:44:47,181 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 21:44:47,182 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 21:44:47,189 INFO L87 Difference]: Start difference. First operand has 1250 states, 870 states have (on average 1.3781609195402298) internal successors, (1199), 920 states have internal predecessors, (1199), 304 states have call successors, (304), 74 states have call predecessors, (304), 74 states have return successors, (304), 298 states have call predecessors, (304), 304 states have call successors, (304) Second operand has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 21:45:03,630 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 21:45:03,631 INFO L93 Difference]: Finished difference Result 3675 states and 5434 transitions. [2022-02-20 21:45:03,631 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 21:45:03,631 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2022-02-20 21:45:03,632 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 21:45:03,633 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 21:45:03,908 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 5434 transitions. [2022-02-20 21:45:03,908 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 21:45:04,131 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 5434 transitions. [2022-02-20 21:45:04,131 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 5434 transitions. [2022-02-20 21:45:08,626 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 5434 edges. 5434 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 21:45:09,118 INFO L225 Difference]: With dead ends: 3675 [2022-02-20 21:45:09,119 INFO L226 Difference]: Without dead ends: 2424 [2022-02-20 21:45:09,134 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 21:45:09,138 INFO L933 BasicCegarLoop]: 2847 mSDtfsCounter, 1711 mSDsluCounter, 1736 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1711 SdHoareTripleChecker+Valid, 4583 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 21:45:09,142 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1711 Valid, 4583 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 21:45:09,161 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2424 states. [2022-02-20 21:45:09,330 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2424 to 2420. [2022-02-20 21:45:09,331 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 21:45:09,353 INFO L82 GeneralOperation]: Start isEquivalent. First operand 2424 states. Second operand has 2420 states, 1687 states have (on average 1.3556609365737997) internal successors, (2287), 1774 states have internal predecessors, (2287), 590 states have call successors, (590), 143 states have call predecessors, (590), 142 states have return successors, (580), 568 states have call predecessors, (580), 580 states have call successors, (580) [2022-02-20 21:45:09,378 INFO L74 IsIncluded]: Start isIncluded. First operand 2424 states. Second operand has 2420 states, 1687 states have (on average 1.3556609365737997) internal successors, (2287), 1774 states have internal predecessors, (2287), 590 states have call successors, (590), 143 states have call predecessors, (590), 142 states have return successors, (580), 568 states have call predecessors, (580), 580 states have call successors, (580) [2022-02-20 21:45:09,385 INFO L87 Difference]: Start difference. First operand 2424 states. Second operand has 2420 states, 1687 states have (on average 1.3556609365737997) internal successors, (2287), 1774 states have internal predecessors, (2287), 590 states have call successors, (590), 143 states have call predecessors, (590), 142 states have return successors, (580), 568 states have call predecessors, (580), 580 states have call successors, (580) [2022-02-20 21:45:09,684 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 21:45:09,684 INFO L93 Difference]: Finished difference Result 2424 states and 3460 transitions. [2022-02-20 21:45:09,690 INFO L276 IsEmpty]: Start isEmpty. Operand 2424 states and 3460 transitions. [2022-02-20 21:45:09,708 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 21:45:09,710 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 21:45:09,719 INFO L74 IsIncluded]: Start isIncluded. First operand has 2420 states, 1687 states have (on average 1.3556609365737997) internal successors, (2287), 1774 states have internal predecessors, (2287), 590 states have call successors, (590), 143 states have call predecessors, (590), 142 states have return successors, (580), 568 states have call predecessors, (580), 580 states have call successors, (580) Second operand 2424 states. [2022-02-20 21:45:09,727 INFO L87 Difference]: Start difference. First operand has 2420 states, 1687 states have (on average 1.3556609365737997) internal successors, (2287), 1774 states have internal predecessors, (2287), 590 states have call successors, (590), 143 states have call predecessors, (590), 142 states have return successors, (580), 568 states have call predecessors, (580), 580 states have call successors, (580) Second operand 2424 states. [2022-02-20 21:45:10,014 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 21:45:10,015 INFO L93 Difference]: Finished difference Result 2424 states and 3460 transitions. [2022-02-20 21:45:10,015 INFO L276 IsEmpty]: Start isEmpty. Operand 2424 states and 3460 transitions. [2022-02-20 21:45:10,028 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 21:45:10,028 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 21:45:10,028 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 21:45:10,029 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 21:45:10,037 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2420 states, 1687 states have (on average 1.3556609365737997) internal successors, (2287), 1774 states have internal predecessors, (2287), 590 states have call successors, (590), 143 states have call predecessors, (590), 142 states have return successors, (580), 568 states have call predecessors, (580), 580 states have call successors, (580) [2022-02-20 21:45:10,461 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2420 states to 2420 states and 3457 transitions. [2022-02-20 21:45:10,464 INFO L78 Accepts]: Start accepts. Automaton has 2420 states and 3457 transitions. Word has length 16 [2022-02-20 21:45:10,464 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 21:45:10,465 INFO L470 AbstractCegarLoop]: Abstraction has 2420 states and 3457 transitions. [2022-02-20 21:45:10,465 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 21:45:10,466 INFO L276 IsEmpty]: Start isEmpty. Operand 2420 states and 3457 transitions. [2022-02-20 21:45:10,467 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-02-20 21:45:10,467 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 21:45:10,468 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 21:45:10,468 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-02-20 21:45:10,468 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 21:45:10,469 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 21:45:10,470 INFO L85 PathProgramCache]: Analyzing trace with hash -1697719892, now seen corresponding path program 1 times [2022-02-20 21:45:10,470 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 21:45:10,470 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [737401240] [2022-02-20 21:45:10,470 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 21:45:10,471 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 21:45:10,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 21:45:10,635 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-02-20 21:45:10,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 21:45:10,668 INFO L290 TraceCheckUtils]: 0: Hoare triple {14598#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= ~proc_ipmi_root~0.base |old(~proc_ipmi_root~0.base)|) (= ~proc_ipmi_root~0.offset |old(~proc_ipmi_root~0.offset)|) (= |old(#valid)| |#valid|) (= |old(~initialized~0)| ~initialized~0))} havoc ~rv~26#1;call ~#__key~2#1.base, ~#__key~2#1.offset := #Ultimate.allocOnStack(8); {14599#(= |old(~initialized~0)| ~initialized~0)} is VALID [2022-02-20 21:45:10,669 INFO L290 TraceCheckUtils]: 1: Hoare triple {14599#(= |old(~initialized~0)| ~initialized~0)} assume 0 != ~initialized~0;#res#1 := 0;call ULTIMATE.dealloc(~#__key~2#1.base, ~#__key~2#1.offset);havoc ~#__key~2#1.base, ~#__key~2#1.offset; {14600#(not (= |old(~initialized~0)| 0))} is VALID [2022-02-20 21:45:10,679 INFO L290 TraceCheckUtils]: 2: Hoare triple {14600#(not (= |old(~initialized~0)| 0))} assume true; {14600#(not (= |old(~initialized~0)| 0))} is VALID [2022-02-20 21:45:10,681 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {14600#(not (= |old(~initialized~0)| 0))} {14593#(= ~initialized~0 0)} #3350#return; {14592#false} is VALID [2022-02-20 21:45:10,682 INFO L290 TraceCheckUtils]: 0: Hoare triple {14591#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(82, 2);call #Ultimate.allocInit(25, 3);call #Ultimate.allocInit(42, 4);call #Ultimate.allocInit(25, 5);call #Ultimate.allocInit(44, 6);call #Ultimate.allocInit(21, 7);call #Ultimate.allocInit(21, 8);call #Ultimate.allocInit(5, 9);call write~init~int(105, 9, 0, 1);call write~init~int(112, 9, 1, 1);call write~init~int(109, 9, 2, 1);call write~init~int(105, 9, 3, 1);call write~init~int(0, 9, 4, 1);call #Ultimate.allocInit(27, 10);call #Ultimate.allocInit(17, 11);call #Ultimate.allocInit(32, 12);call #Ultimate.allocInit(22, 13);call #Ultimate.allocInit(29, 14);call #Ultimate.allocInit(19, 15);call #Ultimate.allocInit(51, 16);call #Ultimate.allocInit(3, 17);call write~init~int(37, 17, 0, 1);call write~init~int(120, 17, 1, 1);call write~init~int(0, 17, 2, 1);call #Ultimate.allocInit(4, 18);call write~init~int(32, 18, 0, 1);call write~init~int(37, 18, 1, 1);call write~init~int(120, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(7, 19);call write~init~int(37, 19, 0, 1);call write~init~int(117, 19, 1, 1);call write~init~int(46, 19, 2, 1);call write~init~int(37, 19, 3, 1);call write~init~int(117, 19, 4, 1);call write~init~int(10, 19, 5, 1);call write~init~int(0, 19, 6, 1);call #Ultimate.allocInit(33, 20);call #Ultimate.allocInit(33, 21);call #Ultimate.allocInit(33, 22);call #Ultimate.allocInit(33, 23);call #Ultimate.allocInit(33, 24);call #Ultimate.allocInit(33, 25);call #Ultimate.allocInit(33, 26);call #Ultimate.allocInit(33, 27);call #Ultimate.allocInit(33, 28);call #Ultimate.allocInit(33, 29);call #Ultimate.allocInit(33, 30);call #Ultimate.allocInit(33, 31);call #Ultimate.allocInit(33, 32);call #Ultimate.allocInit(33, 33);call #Ultimate.allocInit(33, 34);call #Ultimate.allocInit(33, 35);call #Ultimate.allocInit(33, 36);call #Ultimate.allocInit(33, 37);call #Ultimate.allocInit(33, 38);call #Ultimate.allocInit(33, 39);call #Ultimate.allocInit(33, 40);call #Ultimate.allocInit(33, 41);call #Ultimate.allocInit(33, 42);call #Ultimate.allocInit(33, 43);call #Ultimate.allocInit(33, 44);call #Ultimate.allocInit(33, 45);call #Ultimate.allocInit(33, 46);call #Ultimate.allocInit(33, 47);call #Ultimate.allocInit(3, 48);call write~init~int(37, 48, 0, 1);call write~init~int(100, 48, 1, 1);call write~init~int(0, 48, 2, 1);call #Ultimate.allocInit(6, 49);call write~init~int(115, 49, 0, 1);call write~init~int(116, 49, 1, 1);call write~init~int(97, 49, 2, 1);call write~init~int(116, 49, 3, 1);call write~init~int(115, 49, 4, 1);call write~init~int(0, 49, 5, 1);call #Ultimate.allocInit(5, 50);call write~init~int(105, 50, 0, 1);call write~init~int(112, 50, 1, 1);call write~init~int(109, 50, 2, 1);call write~init~int(98, 50, 3, 1);call write~init~int(0, 50, 4, 1);call #Ultimate.allocInit(8, 51);call #Ultimate.allocInit(4, 52);call write~init~int(37, 52, 0, 1);call write~init~int(117, 52, 1, 1);call write~init~int(10, 52, 2, 1);call write~init~int(0, 52, 3, 1);call #Ultimate.allocInit(4, 53);call write~init~int(37, 53, 0, 1);call write~init~int(117, 53, 1, 1);call write~init~int(10, 53, 2, 1);call write~init~int(0, 53, 3, 1);call #Ultimate.allocInit(4, 54);call write~init~int(37, 54, 0, 1);call write~init~int(117, 54, 1, 1);call write~init~int(10, 54, 2, 1);call write~init~int(0, 54, 3, 1);call #Ultimate.allocInit(7, 55);call write~init~int(37, 55, 0, 1);call write~init~int(117, 55, 1, 1);call write~init~int(46, 55, 2, 1);call write~init~int(37, 55, 3, 1);call write~init~int(120, 55, 4, 1);call write~init~int(10, 55, 5, 1);call write~init~int(0, 55, 6, 1);call #Ultimate.allocInit(7, 56);call write~init~int(37, 56, 0, 1);call write~init~int(117, 56, 1, 1);call write~init~int(46, 56, 2, 1);call write~init~int(37, 56, 3, 1);call write~init~int(117, 56, 4, 1);call write~init~int(10, 56, 5, 1);call write~init~int(0, 56, 6, 1);call #Ultimate.allocInit(8, 57);call #Ultimate.allocInit(9, 58);call #Ultimate.allocInit(9, 59);call #Ultimate.allocInit(29, 60);call #Ultimate.allocInit(8, 61);call #Ultimate.allocInit(10, 62);call #Ultimate.allocInit(21, 63);call #Ultimate.allocInit(9, 64);call #Ultimate.allocInit(18, 65);call #Ultimate.allocInit(13, 66);call #Ultimate.allocInit(26, 67);call #Ultimate.allocInit(16, 68);call #Ultimate.allocInit(11, 69);call #Ultimate.allocInit(5, 70);call write~init~int(103, 70, 0, 1);call write~init~int(117, 70, 1, 1);call write~init~int(105, 70, 2, 1);call write~init~int(100, 70, 3, 1);call write~init~int(0, 70, 4, 1);call #Ultimate.allocInit(22, 71);call #Ultimate.allocInit(86, 72);call #Ultimate.allocInit(15, 73);call #Ultimate.allocInit(224, 74);call #Ultimate.allocInit(43, 75);call #Ultimate.allocInit(54, 76);call #Ultimate.allocInit(53, 77);call #Ultimate.allocInit(68, 78);call #Ultimate.allocInit(44, 79);call #Ultimate.allocInit(52, 80);call #Ultimate.allocInit(7, 81);call write~init~int(105, 81, 0, 1);call write~init~int(112, 81, 1, 1);call write~init~int(109, 81, 2, 1);call write~init~int(105, 81, 3, 1);call write~init~int(37, 81, 4, 1);call write~init~int(100, 81, 5, 1);call write~init~int(0, 81, 6, 1);call #Ultimate.allocInit(46, 82);call #Ultimate.allocInit(7, 83);call write~init~int(105, 83, 0, 1);call write~init~int(112, 83, 1, 1);call write~init~int(109, 83, 2, 1);call write~init~int(105, 83, 3, 1);call write~init~int(37, 83, 4, 1);call write~init~int(100, 83, 5, 1);call write~init~int(0, 83, 6, 1);call #Ultimate.allocInit(55, 84);call #Ultimate.allocInit(152, 85);call #Ultimate.allocInit(62, 86);call #Ultimate.allocInit(26, 87);call #Ultimate.allocInit(23, 88);call #Ultimate.allocInit(35, 89);call #Ultimate.allocInit(29, 90);call #Ultimate.allocInit(23, 91);call #Ultimate.allocInit(39, 92);call #Ultimate.allocInit(13, 93);call #Ultimate.allocInit(69, 94);call #Ultimate.allocInit(162, 95);call #Ultimate.allocInit(90, 96);call #Ultimate.allocInit(103, 97);call #Ultimate.allocInit(55, 98);call #Ultimate.allocInit(36, 99);call #Ultimate.allocInit(5, 100);call write~init~int(105, 100, 0, 1);call write~init~int(112, 100, 1, 1);call write~init~int(109, 100, 2, 1);call write~init~int(105, 100, 3, 1);call write~init~int(0, 100, 4, 1);call #Ultimate.allocInit(54, 101);call #Ultimate.allocInit(16, 102);call #Ultimate.allocInit(53, 103);call #Ultimate.allocInit(54, 104);~ldv_state_variable_3~0 := 0;~ldv_state_variable_1~0 := 0;~ldv_state_variable_2~0 := 0;~ldv_state_variable_4~0 := 0;~ref_cnt~0 := 0;~ldv_state_variable_0~0 := 0;~initialized~0 := 0;~proc_ipmi_root~0.base, ~proc_ipmi_root~0.offset := 0, 0;~#ipmidriver~0.base, ~#ipmidriver~0.offset := 105, 0;call #Ultimate.allocInit(161, 105);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, 8 + ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, 16 + ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, 24 + ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, 32 + ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(9, 0, ~#ipmidriver~0.base, 40 + ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(~#platform_bus_type~0.base, ~#platform_bus_type~0.offset, ~#ipmidriver~0.base, 48 + ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, 56 + ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, 64 + ~#ipmidriver~0.offset, 8);call write~init~int(0, ~#ipmidriver~0.base, 72 + ~#ipmidriver~0.offset, 1);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, 73 + ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, 81 + ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, 89 + ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, 97 + ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, 105 + ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, 113 + ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, 121 + ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, 129 + ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, 137 + ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, 145 + ~#ipmidriver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver~0.base, 153 + ~#ipmidriver~0.offset, 8);~#ipmidriver_mutex~0.base, ~#ipmidriver_mutex~0.offset := 106, 0;call #Ultimate.allocInit(156, 106);call write~init~int(1, ~#ipmidriver_mutex~0.base, ~#ipmidriver_mutex~0.offset, 4);call write~init~int(0, ~#ipmidriver_mutex~0.base, 4 + ~#ipmidriver_mutex~0.offset, 4);call write~init~int(3735899821, ~#ipmidriver_mutex~0.base, 8 + ~#ipmidriver_mutex~0.offset, 4);call write~init~int(4294967295, ~#ipmidriver_mutex~0.base, 12 + ~#ipmidriver_mutex~0.offset, 4);call write~init~$Pointer$(0, -1, ~#ipmidriver_mutex~0.base, 16 + ~#ipmidriver_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver_mutex~0.base, 24 + ~#ipmidriver_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver_mutex~0.base, 32 + ~#ipmidriver_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver_mutex~0.base, 40 + ~#ipmidriver_mutex~0.offset, 8);call write~init~$Pointer$(10, 0, ~#ipmidriver_mutex~0.base, 48 + ~#ipmidriver_mutex~0.offset, 8);call write~init~int(0, ~#ipmidriver_mutex~0.base, 56 + ~#ipmidriver_mutex~0.offset, 4);call write~init~int(0, ~#ipmidriver_mutex~0.base, 60 + ~#ipmidriver_mutex~0.offset, 8);call write~init~$Pointer$(~#ipmidriver_mutex~0.base, 72 + ~#ipmidriver_mutex~0.offset, ~#ipmidriver_mutex~0.base, 72 + ~#ipmidriver_mutex~0.offset, 8);call write~init~$Pointer$(~#ipmidriver_mutex~0.base, 72 + ~#ipmidriver_mutex~0.offset, ~#ipmidriver_mutex~0.base, 80 + ~#ipmidriver_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver_mutex~0.base, 88 + ~#ipmidriver_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver_mutex~0.base, 96 + ~#ipmidriver_mutex~0.offset, 8);call write~init~$Pointer$(~#ipmidriver_mutex~0.base, ~#ipmidriver_mutex~0.offset, ~#ipmidriver_mutex~0.base, 104 + ~#ipmidriver_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver_mutex~0.base, 112 + ~#ipmidriver_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver_mutex~0.base, 120 + ~#ipmidriver_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmidriver_mutex~0.base, 128 + ~#ipmidriver_mutex~0.offset, 8);call write~init~$Pointer$(11, 0, ~#ipmidriver_mutex~0.base, 136 + ~#ipmidriver_mutex~0.offset, 8);call write~init~int(0, ~#ipmidriver_mutex~0.base, 144 + ~#ipmidriver_mutex~0.offset, 4);call write~init~int(0, ~#ipmidriver_mutex~0.base, 148 + ~#ipmidriver_mutex~0.offset, 8);~#ipmi_interfaces~0.base, ~#ipmi_interfaces~0.offset := 107, 0;call #Ultimate.allocInit(16, 107);call write~init~$Pointer$(~#ipmi_interfaces~0.base, ~#ipmi_interfaces~0.offset, ~#ipmi_interfaces~0.base, ~#ipmi_interfaces~0.offset, 8);call write~init~$Pointer$(~#ipmi_interfaces~0.base, ~#ipmi_interfaces~0.offset, ~#ipmi_interfaces~0.base, 8 + ~#ipmi_interfaces~0.offset, 8);~#ipmi_interfaces_mutex~0.base, ~#ipmi_interfaces_mutex~0.offset := 108, 0;call #Ultimate.allocInit(156, 108);call write~init~int(1, ~#ipmi_interfaces_mutex~0.base, ~#ipmi_interfaces_mutex~0.offset, 4);call write~init~int(0, ~#ipmi_interfaces_mutex~0.base, 4 + ~#ipmi_interfaces_mutex~0.offset, 4);call write~init~int(3735899821, ~#ipmi_interfaces_mutex~0.base, 8 + ~#ipmi_interfaces_mutex~0.offset, 4);call write~init~int(4294967295, ~#ipmi_interfaces_mutex~0.base, 12 + ~#ipmi_interfaces_mutex~0.offset, 4);call write~init~$Pointer$(0, -1, ~#ipmi_interfaces_mutex~0.base, 16 + ~#ipmi_interfaces_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmi_interfaces_mutex~0.base, 24 + ~#ipmi_interfaces_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmi_interfaces_mutex~0.base, 32 + ~#ipmi_interfaces_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmi_interfaces_mutex~0.base, 40 + ~#ipmi_interfaces_mutex~0.offset, 8);call write~init~$Pointer$(12, 0, ~#ipmi_interfaces_mutex~0.base, 48 + ~#ipmi_interfaces_mutex~0.offset, 8);call write~init~int(0, ~#ipmi_interfaces_mutex~0.base, 56 + ~#ipmi_interfaces_mutex~0.offset, 4);call write~init~int(0, ~#ipmi_interfaces_mutex~0.base, 60 + ~#ipmi_interfaces_mutex~0.offset, 8);call write~init~$Pointer$(~#ipmi_interfaces_mutex~0.base, 72 + ~#ipmi_interfaces_mutex~0.offset, ~#ipmi_interfaces_mutex~0.base, 72 + ~#ipmi_interfaces_mutex~0.offset, 8);call write~init~$Pointer$(~#ipmi_interfaces_mutex~0.base, 72 + ~#ipmi_interfaces_mutex~0.offset, ~#ipmi_interfaces_mutex~0.base, 80 + ~#ipmi_interfaces_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmi_interfaces_mutex~0.base, 88 + ~#ipmi_interfaces_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmi_interfaces_mutex~0.base, 96 + ~#ipmi_interfaces_mutex~0.offset, 8);call write~init~$Pointer$(~#ipmi_interfaces_mutex~0.base, ~#ipmi_interfaces_mutex~0.offset, ~#ipmi_interfaces_mutex~0.base, 104 + ~#ipmi_interfaces_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmi_interfaces_mutex~0.base, 112 + ~#ipmi_interfaces_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmi_interfaces_mutex~0.base, 120 + ~#ipmi_interfaces_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ipmi_interfaces_mutex~0.base, 128 + ~#ipmi_interfaces_mutex~0.offset, 8);call write~init~$Pointer$(13, 0, ~#ipmi_interfaces_mutex~0.base, 136 + ~#ipmi_interfaces_mutex~0.offset, 8);call write~init~int(0, ~#ipmi_interfaces_mutex~0.base, 144 + ~#ipmi_interfaces_mutex~0.offset, 4);call write~init~int(0, ~#ipmi_interfaces_mutex~0.base, 148 + ~#ipmi_interfaces_mutex~0.offset, 8);~#smi_watchers~0.base, ~#smi_watchers~0.offset := 109, 0;call #Ultimate.allocInit(16, 109);call write~init~$Pointer$(~#smi_watchers~0.base, ~#smi_watchers~0.offset, ~#smi_watchers~0.base, ~#smi_watchers~0.offset, 8);call write~init~$Pointer$(~#smi_watchers~0.base, ~#smi_watchers~0.offset, ~#smi_watchers~0.base, 8 + ~#smi_watchers~0.offset, 8);~#smi_watchers_mutex~0.base, ~#smi_watchers_mutex~0.offset := 110, 0;call #Ultimate.allocInit(156, 110);call write~init~int(1, ~#smi_watchers_mutex~0.base, ~#smi_watchers_mutex~0.offset, 4);call write~init~int(0, ~#smi_watchers_mutex~0.base, 4 + ~#smi_watchers_mutex~0.offset, 4);call write~init~int(3735899821, ~#smi_watchers_mutex~0.base, 8 + ~#smi_watchers_mutex~0.offset, 4);call write~init~int(4294967295, ~#smi_watchers_mutex~0.base, 12 + ~#smi_watchers_mutex~0.offset, 4);call write~init~$Pointer$(0, -1, ~#smi_watchers_mutex~0.base, 16 + ~#smi_watchers_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_watchers_mutex~0.base, 24 + ~#smi_watchers_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_watchers_mutex~0.base, 32 + ~#smi_watchers_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_watchers_mutex~0.base, 40 + ~#smi_watchers_mutex~0.offset, 8);call write~init~$Pointer$(14, 0, ~#smi_watchers_mutex~0.base, 48 + ~#smi_watchers_mutex~0.offset, 8);call write~init~int(0, ~#smi_watchers_mutex~0.base, 56 + ~#smi_watchers_mutex~0.offset, 4);call write~init~int(0, ~#smi_watchers_mutex~0.base, 60 + ~#smi_watchers_mutex~0.offset, 8);call write~init~$Pointer$(~#smi_watchers_mutex~0.base, 72 + ~#smi_watchers_mutex~0.offset, ~#smi_watchers_mutex~0.base, 72 + ~#smi_watchers_mutex~0.offset, 8);call write~init~$Pointer$(~#smi_watchers_mutex~0.base, 72 + ~#smi_watchers_mutex~0.offset, ~#smi_watchers_mutex~0.base, 80 + ~#smi_watchers_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_watchers_mutex~0.base, 88 + ~#smi_watchers_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_watchers_mutex~0.base, 96 + ~#smi_watchers_mutex~0.offset, 8);call write~init~$Pointer$(~#smi_watchers_mutex~0.base, ~#smi_watchers_mutex~0.offset, ~#smi_watchers_mutex~0.base, 104 + ~#smi_watchers_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_watchers_mutex~0.base, 112 + ~#smi_watchers_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_watchers_mutex~0.base, 120 + ~#smi_watchers_mutex~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_watchers_mutex~0.base, 128 + ~#smi_watchers_mutex~0.offset, 8);call write~init~$Pointer$(15, 0, ~#smi_watchers_mutex~0.base, 136 + ~#smi_watchers_mutex~0.offset, 8);call write~init~int(0, ~#smi_watchers_mutex~0.base, 144 + ~#smi_watchers_mutex~0.offset, 4);call write~init~int(0, ~#smi_watchers_mutex~0.base, 148 + ~#smi_watchers_mutex~0.offset, 8);~#smi_ipmb_proc_ops~0.base, ~#smi_ipmb_proc_ops~0.offset := 111, 0;call #Ultimate.allocInit(216, 111);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(#funAddr~seq_lseek.base, #funAddr~seq_lseek.offset, ~#smi_ipmb_proc_ops~0.base, 8 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(#funAddr~seq_read.base, #funAddr~seq_read.offset, ~#smi_ipmb_proc_ops~0.base, 16 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 24 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 32 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 40 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 48 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 56 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 64 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 72 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 80 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(#funAddr~smi_ipmb_proc_open.base, #funAddr~smi_ipmb_proc_open.offset, ~#smi_ipmb_proc_ops~0.base, 88 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 96 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(#funAddr~single_release.base, #funAddr~single_release.offset, ~#smi_ipmb_proc_ops~0.base, 104 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 112 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 120 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 128 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 136 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 144 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 152 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 160 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 168 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 176 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 184 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 192 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 200 + ~#smi_ipmb_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_ipmb_proc_ops~0.base, 208 + ~#smi_ipmb_proc_ops~0.offset, 8);~#smi_version_proc_ops~0.base, ~#smi_version_proc_ops~0.offset := 112, 0;call #Ultimate.allocInit(216, 112);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(#funAddr~seq_lseek.base, #funAddr~seq_lseek.offset, ~#smi_version_proc_ops~0.base, 8 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(#funAddr~seq_read.base, #funAddr~seq_read.offset, ~#smi_version_proc_ops~0.base, 16 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 24 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 32 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 40 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 48 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 56 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 64 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 72 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 80 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(#funAddr~smi_version_proc_open.base, #funAddr~smi_version_proc_open.offset, ~#smi_version_proc_ops~0.base, 88 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 96 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(#funAddr~single_release.base, #funAddr~single_release.offset, ~#smi_version_proc_ops~0.base, 104 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 112 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 120 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 128 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 136 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 144 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 152 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 160 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 168 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 176 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 184 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 192 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 200 + ~#smi_version_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_version_proc_ops~0.base, 208 + ~#smi_version_proc_ops~0.offset, 8);~#smi_stats_proc_ops~0.base, ~#smi_stats_proc_ops~0.offset := 113, 0;call #Ultimate.allocInit(216, 113);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(#funAddr~seq_lseek.base, #funAddr~seq_lseek.offset, ~#smi_stats_proc_ops~0.base, 8 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(#funAddr~seq_read.base, #funAddr~seq_read.offset, ~#smi_stats_proc_ops~0.base, 16 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 24 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 32 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 40 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 48 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 56 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 64 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 72 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 80 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(#funAddr~smi_stats_proc_open.base, #funAddr~smi_stats_proc_open.offset, ~#smi_stats_proc_ops~0.base, 88 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 96 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(#funAddr~single_release.base, #funAddr~single_release.offset, ~#smi_stats_proc_ops~0.base, 104 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 112 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 120 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 128 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 136 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 144 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 152 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 160 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 168 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 176 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 184 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 192 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 200 + ~#smi_stats_proc_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#smi_stats_proc_ops~0.base, 208 + ~#smi_stats_proc_ops~0.offset, 8);~#ipmi_timer~0.base, ~#ipmi_timer~0.offset := 114, 0;call #Ultimate.allocInit(124, 114);#memory_$Pointer$.base, #memory_$Pointer$.offset := ~initToZeroAtPointerBaseAddress~$Pointer$.base(#memory_$Pointer$.base, #memory_$Pointer$.offset, ~#ipmi_timer~0.base), ~initToZeroAtPointerBaseAddress~$Pointer$.offset(#memory_$Pointer$.base, #memory_$Pointer$.offset, ~#ipmi_timer~0.base);#memory_int := ~initToZeroAtPointerBaseAddress~int(#memory_int, ~#ipmi_timer~0.base);~#stop_operation~0.base, ~#stop_operation~0.offset := 115, 0;call #Ultimate.allocInit(4, 115);call write~init~int(0, ~#stop_operation~0.base, ~#stop_operation~0.offset, 4);~ticks_to_req_ev~0 := 1;~#smi_msg_inuse_count~0.base, ~#smi_msg_inuse_count~0.offset := 116, 0;call #Ultimate.allocInit(4, 116);call write~init~int(0, ~#smi_msg_inuse_count~0.base, ~#smi_msg_inuse_count~0.offset, 4);~#recv_msg_inuse_count~0.base, ~#recv_msg_inuse_count~0.offset := 117, 0;call #Ultimate.allocInit(4, 117);call write~init~int(0, ~#recv_msg_inuse_count~0.base, ~#recv_msg_inuse_count~0.offset, 4);~#panic_done_count~0.base, ~#panic_done_count~0.offset := 118, 0;call #Ultimate.allocInit(4, 118);call write~init~int(0, ~#panic_done_count~0.base, ~#panic_done_count~0.offset, 4);~has_panicked~0 := 0;~#panic_block~0.base, ~#panic_block~0.offset := 119, 0;call #Ultimate.allocInit(20, 119);call write~init~$Pointer$(#funAddr~panic_event.base, #funAddr~panic_event.offset, ~#panic_block~0.base, ~#panic_block~0.offset, 8);call write~init~$Pointer$(0, 0, ~#panic_block~0.base, 8 + ~#panic_block~0.offset, 8);call write~init~int(200, ~#panic_block~0.base, 16 + ~#panic_block~0.offset, 4);~ldv_retval_ipmi_init_msghandler_mod~0 := 0;~ldv_retval_smi_stats_proc_open~0 := 0;~ldv_retval_smi_version_proc_open~0 := 0;~ldvarg1~0.base, ~ldvarg1~0.offset := 0, 0;~smi_stats_proc_ops_group2~0.base, ~smi_stats_proc_ops_group2~0.offset := 0, 0;~smi_ipmb_proc_ops_group1~0.base, ~smi_ipmb_proc_ops_group1~0.offset := 0, 0;~smi_ipmb_proc_ops_group2~0.base, ~smi_ipmb_proc_ops_group2~0.offset := 0, 0;~ldvarg0~0.base, ~ldvarg0~0.offset := 0, 0;~ldv_retval_smi_ipmb_proc_open~0 := 0;~smi_version_proc_ops_group1~0.base, ~smi_version_proc_ops_group1~0.offset := 0, 0;~smi_version_proc_ops_group2~0.base, ~smi_version_proc_ops_group2~0.offset := 0, 0;~smi_stats_proc_ops_group1~0.base, ~smi_stats_proc_ops_group1~0.offset := 0, 0;~ldvarg2~0 := 0;~ldv_mutex_cmd_rcvrs_mutex_of_ipmi_smi~0 := 0;~ldv_mutex_cred_guard_mutex_of_signal_struct~0 := 0;~ldv_mutex_ipmi_interfaces_mutex~0 := 0;~ldv_mutex_ipmidriver_mutex~0 := 0;~ldv_mutex_lock~0 := 0;~ldv_mutex_mutex_of_device~0 := 0;~ldv_mutex_proc_entry_lock_of_ipmi_smi~0 := 0;~ldv_mutex_smi_watchers_mutex~0 := 0; {14593#(= ~initialized~0 0)} is VALID [2022-02-20 21:45:10,683 INFO L290 TraceCheckUtils]: 1: Hoare triple {14593#(= ~initialized~0 0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet1478#1, main_#t~switch1479#1, main_#t~nondet1480#1, main_#t~switch1481#1, main_#t~ret1482#1, main_#t~nondet1483#1, main_#t~switch1484#1, main_#t~ret1485#1, main_#t~ret1486#1, main_#t~nondet1487#1, main_#t~switch1488#1, main_#t~ret1489#1, main_#t~nondet1490#1, main_#t~switch1491#1, main_#t~ret1492#1, main_#t~ret1493#1, main_#t~nondet1494#1, main_#t~switch1495#1, main_#t~ret1496#1, main_#t~ret1497#1, main_~tmp~74#1, main_~tmp___0~42#1, main_~tmp___1~15#1, main_~tmp___2~10#1, main_~tmp___3~7#1, main_~tmp___4~5#1;havoc main_~tmp~74#1;havoc main_~tmp___0~42#1;havoc main_~tmp___1~15#1;havoc main_~tmp___2~10#1;havoc main_~tmp___3~7#1;havoc main_~tmp___4~5#1;assume { :begin_inline_ldv_initialize } true;~ldv_mutex_cmd_rcvrs_mutex_of_ipmi_smi~0 := 1;~ldv_mutex_cred_guard_mutex_of_signal_struct~0 := 1;~ldv_mutex_ipmi_interfaces_mutex~0 := 1;~ldv_mutex_ipmidriver_mutex~0 := 1;~ldv_mutex_lock~0 := 1;~ldv_mutex_mutex_of_device~0 := 1;~ldv_mutex_proc_entry_lock_of_ipmi_smi~0 := 1;~ldv_mutex_smi_watchers_mutex~0 := 1; {14593#(= ~initialized~0 0)} is VALID [2022-02-20 21:45:10,684 INFO L290 TraceCheckUtils]: 2: Hoare triple {14593#(= ~initialized~0 0)} assume { :end_inline_ldv_initialize } true;~ldv_state_variable_4~0 := 0;~ldv_state_variable_1~0 := 0;~ref_cnt~0 := 0;~ldv_state_variable_0~0 := 1;~ldv_state_variable_3~0 := 0;~ldv_state_variable_2~0 := 0; {14593#(= ~initialized~0 0)} is VALID [2022-02-20 21:45:10,684 INFO L290 TraceCheckUtils]: 3: Hoare triple {14593#(= ~initialized~0 0)} assume -2147483648 <= main_#t~nondet1478#1 && main_#t~nondet1478#1 <= 2147483647;main_~tmp~74#1 := main_#t~nondet1478#1;havoc main_#t~nondet1478#1;main_#t~switch1479#1 := 0 == main_~tmp~74#1; {14593#(= ~initialized~0 0)} is VALID [2022-02-20 21:45:10,685 INFO L290 TraceCheckUtils]: 4: Hoare triple {14593#(= ~initialized~0 0)} assume !main_#t~switch1479#1;main_#t~switch1479#1 := main_#t~switch1479#1 || 1 == main_~tmp~74#1; {14593#(= ~initialized~0 0)} is VALID [2022-02-20 21:45:10,685 INFO L290 TraceCheckUtils]: 5: Hoare triple {14593#(= ~initialized~0 0)} assume !main_#t~switch1479#1;main_#t~switch1479#1 := main_#t~switch1479#1 || 2 == main_~tmp~74#1; {14593#(= ~initialized~0 0)} is VALID [2022-02-20 21:45:10,685 INFO L290 TraceCheckUtils]: 6: Hoare triple {14593#(= ~initialized~0 0)} assume main_#t~switch1479#1; {14593#(= ~initialized~0 0)} is VALID [2022-02-20 21:45:10,686 INFO L290 TraceCheckUtils]: 7: Hoare triple {14593#(= ~initialized~0 0)} assume 0 != ~ldv_state_variable_0~0;assume -2147483648 <= main_#t~nondet1487#1 && main_#t~nondet1487#1 <= 2147483647;main_~tmp___2~10#1 := main_#t~nondet1487#1;havoc main_#t~nondet1487#1;main_#t~switch1488#1 := 0 == main_~tmp___2~10#1; {14593#(= ~initialized~0 0)} is VALID [2022-02-20 21:45:10,686 INFO L290 TraceCheckUtils]: 8: Hoare triple {14593#(= ~initialized~0 0)} assume !main_#t~switch1488#1;main_#t~switch1488#1 := main_#t~switch1488#1 || 1 == main_~tmp___2~10#1; {14593#(= ~initialized~0 0)} is VALID [2022-02-20 21:45:10,687 INFO L290 TraceCheckUtils]: 9: Hoare triple {14593#(= ~initialized~0 0)} assume main_#t~switch1488#1; {14593#(= ~initialized~0 0)} is VALID [2022-02-20 21:45:10,687 INFO L290 TraceCheckUtils]: 10: Hoare triple {14593#(= ~initialized~0 0)} assume 1 == ~ldv_state_variable_0~0;assume { :begin_inline_ipmi_init_msghandler_mod } true;havoc ipmi_init_msghandler_mod_#res#1;havoc ipmi_init_msghandler_mod_#t~ret1471#1; {14593#(= ~initialized~0 0)} is VALID [2022-02-20 21:45:10,688 INFO L272 TraceCheckUtils]: 11: Hoare triple {14593#(= ~initialized~0 0)} call ipmi_init_msghandler_mod_#t~ret1471#1 := ipmi_init_msghandler(); {14598#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= ~proc_ipmi_root~0.base |old(~proc_ipmi_root~0.base)|) (= ~proc_ipmi_root~0.offset |old(~proc_ipmi_root~0.offset)|) (= |old(#valid)| |#valid|) (= |old(~initialized~0)| ~initialized~0))} is VALID [2022-02-20 21:45:10,689 INFO L290 TraceCheckUtils]: 12: Hoare triple {14598#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= ~proc_ipmi_root~0.base |old(~proc_ipmi_root~0.base)|) (= ~proc_ipmi_root~0.offset |old(~proc_ipmi_root~0.offset)|) (= |old(#valid)| |#valid|) (= |old(~initialized~0)| ~initialized~0))} havoc ~rv~26#1;call ~#__key~2#1.base, ~#__key~2#1.offset := #Ultimate.allocOnStack(8); {14599#(= |old(~initialized~0)| ~initialized~0)} is VALID [2022-02-20 21:45:10,690 INFO L290 TraceCheckUtils]: 13: Hoare triple {14599#(= |old(~initialized~0)| ~initialized~0)} assume 0 != ~initialized~0;#res#1 := 0;call ULTIMATE.dealloc(~#__key~2#1.base, ~#__key~2#1.offset);havoc ~#__key~2#1.base, ~#__key~2#1.offset; {14600#(not (= |old(~initialized~0)| 0))} is VALID [2022-02-20 21:45:10,690 INFO L290 TraceCheckUtils]: 14: Hoare triple {14600#(not (= |old(~initialized~0)| 0))} assume true; {14600#(not (= |old(~initialized~0)| 0))} is VALID [2022-02-20 21:45:10,691 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {14600#(not (= |old(~initialized~0)| 0))} {14593#(= ~initialized~0 0)} #3350#return; {14592#false} is VALID [2022-02-20 21:45:10,691 INFO L290 TraceCheckUtils]: 16: Hoare triple {14592#false} assume -2147483648 <= ipmi_init_msghandler_mod_#t~ret1471#1 && ipmi_init_msghandler_mod_#t~ret1471#1 <= 2147483647;havoc ipmi_init_msghandler_mod_#t~ret1471#1;ipmi_init_msghandler_mod_#res#1 := 0; {14592#false} is VALID [2022-02-20 21:45:10,691 INFO L290 TraceCheckUtils]: 17: Hoare triple {14592#false} main_#t~ret1489#1 := ipmi_init_msghandler_mod_#res#1;assume { :end_inline_ipmi_init_msghandler_mod } true;assume -2147483648 <= main_#t~ret1489#1 && main_#t~ret1489#1 <= 2147483647;~ldv_retval_ipmi_init_msghandler_mod~0 := main_#t~ret1489#1;havoc main_#t~ret1489#1; {14592#false} is VALID [2022-02-20 21:45:10,692 INFO L290 TraceCheckUtils]: 18: Hoare triple {14592#false} assume 0 != ~ldv_retval_ipmi_init_msghandler_mod~0;~ldv_state_variable_0~0 := 3; {14592#false} is VALID [2022-02-20 21:45:10,692 INFO L290 TraceCheckUtils]: 19: Hoare triple {14592#false} assume { :begin_inline_ldv_check_final_state } true; {14592#false} is VALID [2022-02-20 21:45:10,692 INFO L290 TraceCheckUtils]: 20: Hoare triple {14592#false} assume !(1 == ~ldv_mutex_cmd_rcvrs_mutex_of_ipmi_smi~0); {14592#false} is VALID [2022-02-20 21:45:10,692 INFO L272 TraceCheckUtils]: 21: Hoare triple {14592#false} call ldv_error(); {14592#false} is VALID [2022-02-20 21:45:10,693 INFO L290 TraceCheckUtils]: 22: Hoare triple {14592#false} assume !false; {14592#false} is VALID [2022-02-20 21:45:10,693 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 21:45:10,693 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 21:45:10,693 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [737401240] [2022-02-20 21:45:10,694 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [737401240] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 21:45:10,694 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 21:45:10,694 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 21:45:10,694 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1556167174] [2022-02-20 21:45:10,694 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 21:45:10,696 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.3333333333333335) internal successors, (20), 4 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2022-02-20 21:45:10,696 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 21:45:10,697 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 3.3333333333333335) internal successors, (20), 4 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 21:45:10,739 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 23 edges. 23 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 21:45:10,739 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 21:45:10,739 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 21:45:10,740 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 21:45:10,740 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-02-20 21:45:10,744 INFO L87 Difference]: Start difference. First operand 2420 states and 3457 transitions. Second operand has 6 states, 6 states have (on average 3.3333333333333335) internal successors, (20), 4 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)