./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-drivers--memstick--host--jmb38x_ms.ko-entry_point.cil.out.i --full-output -ea --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 03d7b7b3 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-drivers--memstick--host--jmb38x_ms.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash ddf5a1a49f314301e8909becfbc4609d48a707110e74ebac2933b9b32da37a44 --- Real Ultimate output --- This is Ultimate 0.2.2-dev-03d7b7b [2022-02-20 21:59:23,758 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-02-20 21:59:23,760 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-02-20 21:59:23,791 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-02-20 21:59:23,792 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-02-20 21:59:23,794 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-02-20 21:59:23,795 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-02-20 21:59:23,797 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-02-20 21:59:23,798 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-02-20 21:59:23,802 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-02-20 21:59:23,802 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-02-20 21:59:23,803 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-02-20 21:59:23,803 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-02-20 21:59:23,805 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-02-20 21:59:23,806 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-02-20 21:59:23,808 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-02-20 21:59:23,809 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-02-20 21:59:23,810 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-02-20 21:59:23,812 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-02-20 21:59:23,816 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-02-20 21:59:23,816 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-02-20 21:59:23,817 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-02-20 21:59:23,818 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-02-20 21:59:23,819 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-02-20 21:59:23,824 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-02-20 21:59:23,824 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-02-20 21:59:23,824 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-02-20 21:59:23,825 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-02-20 21:59:23,826 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-02-20 21:59:23,826 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-02-20 21:59:23,826 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-02-20 21:59:23,827 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-02-20 21:59:23,828 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-02-20 21:59:23,829 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-02-20 21:59:23,830 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-02-20 21:59:23,830 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-02-20 21:59:23,830 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-02-20 21:59:23,831 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-02-20 21:59:23,831 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-02-20 21:59:23,831 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-02-20 21:59:23,833 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-02-20 21:59:23,833 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2022-02-20 21:59:23,856 INFO L113 SettingsManager]: Loading preferences was successful [2022-02-20 21:59:23,856 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-02-20 21:59:23,857 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-02-20 21:59:23,857 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-02-20 21:59:23,857 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-02-20 21:59:23,858 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-02-20 21:59:23,858 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-02-20 21:59:23,858 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-02-20 21:59:23,858 INFO L138 SettingsManager]: * Use SBE=true [2022-02-20 21:59:23,859 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-02-20 21:59:23,859 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-02-20 21:59:23,859 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-02-20 21:59:23,859 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-02-20 21:59:23,860 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-02-20 21:59:23,860 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-02-20 21:59:23,860 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-02-20 21:59:23,860 INFO L138 SettingsManager]: * Use constant arrays=true [2022-02-20 21:59:23,860 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-02-20 21:59:23,860 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-02-20 21:59:23,861 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-02-20 21:59:23,861 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-02-20 21:59:23,861 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 21:59:23,861 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-02-20 21:59:23,861 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-02-20 21:59:23,861 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-02-20 21:59:23,861 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-02-20 21:59:23,862 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-02-20 21:59:23,863 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-02-20 21:59:23,863 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-02-20 21:59:23,863 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-02-20 21:59:23,863 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ddf5a1a49f314301e8909becfbc4609d48a707110e74ebac2933b9b32da37a44 [2022-02-20 21:59:24,057 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-02-20 21:59:24,070 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-02-20 21:59:24,072 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-02-20 21:59:24,072 INFO L271 PluginConnector]: Initializing CDTParser... [2022-02-20 21:59:24,073 INFO L275 PluginConnector]: CDTParser initialized [2022-02-20 21:59:24,074 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-drivers--memstick--host--jmb38x_ms.ko-entry_point.cil.out.i [2022-02-20 21:59:24,109 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/e953c10ac/2cb8bf8b150e4fd49d58f45de131bdb8/FLAGefa0144e9 [2022-02-20 21:59:24,669 INFO L306 CDTParser]: Found 1 translation units. [2022-02-20 21:59:24,670 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-drivers--memstick--host--jmb38x_ms.ko-entry_point.cil.out.i [2022-02-20 21:59:24,707 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/e953c10ac/2cb8bf8b150e4fd49d58f45de131bdb8/FLAGefa0144e9 [2022-02-20 21:59:24,905 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/e953c10ac/2cb8bf8b150e4fd49d58f45de131bdb8 [2022-02-20 21:59:24,907 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-02-20 21:59:24,908 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-02-20 21:59:24,909 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-02-20 21:59:24,909 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-02-20 21:59:24,912 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-02-20 21:59:24,912 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 09:59:24" (1/1) ... [2022-02-20 21:59:24,913 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@469152b0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:59:24, skipping insertion in model container [2022-02-20 21:59:24,913 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 09:59:24" (1/1) ... [2022-02-20 21:59:24,918 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-02-20 21:59:24,969 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-02-20 21:59:25,260 WARN L1246 CHandler]: Detected problem Invalid redeclaration of the name show at C: (*show)(struct kobject___0 * , struct attribute___0 * , char * ) [2411] [2022-02-20 21:59:25,261 WARN L1246 CHandler]: Detected problem Invalid redeclaration of the name store at C: (*store)(struct kobject___0 * , struct attribute___0 * , char const * , size_t ) [2412-2413] [2022-02-20 21:59:25,361 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-drivers--memstick--host--jmb38x_ms.ko-entry_point.cil.out.i[85029,85042] [2022-02-20 21:59:25,858 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 21:59:25,875 INFO L203 MainTranslator]: Completed pre-run [2022-02-20 21:59:25,921 WARN L1246 CHandler]: Detected problem Invalid redeclaration of the name show at C: (*show)(struct kobject___0 * , struct attribute___0 * , char * ) [2411] [2022-02-20 21:59:25,922 WARN L1246 CHandler]: Detected problem Invalid redeclaration of the name store at C: (*store)(struct kobject___0 * , struct attribute___0 * , char const * , size_t ) [2412-2413] [2022-02-20 21:59:25,934 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-drivers--memstick--host--jmb38x_ms.ko-entry_point.cil.out.i[85029,85042] [2022-02-20 21:59:26,046 FATAL L? ?]: The Plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator has thrown an exception: java.lang.AssertionError: HeapLValues must be converted to RValue before their value can be queried. at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.result.HeapLValue.getValue(HeapLValue.java:74) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.expressiontranslation.BitabsTranslation.abstractAssign(BitabsTranslation.java:517) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.expressiontranslation.IntegerTranslation.abstractAssginWithBitwiseOp(IntegerTranslation.java:973) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.CHandler.visit(CHandler.java:737) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.MainDispatcher.dispatch(MainDispatcher.java:372) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.CHandler.visit(CHandler.java:1392) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.MainDispatcher.dispatch(MainDispatcher.java:326) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.CHandler.visit(CHandler.java:1076) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.MainDispatcher.dispatch(MainDispatcher.java:334) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.CHandler.visit(CHandler.java:1622) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.MainDispatcher.dispatch(MainDispatcher.java:332) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.CHandler.visit(CHandler.java:1076) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.MainDispatcher.dispatch(MainDispatcher.java:334) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.CHandler.visit(CHandler.java:1076) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.MainDispatcher.dispatch(MainDispatcher.java:334) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.chandler.FunctionHandler.handleFunctionDefinition(FunctionHandler.java:371) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.CHandler.visit(CHandler.java:1465) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.MainDispatcher.dispatch(MainDispatcher.java:289) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.CHandler.processTUchild(CHandler.java:3271) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.CHandler.visit(CHandler.java:2356) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.CHandler.visit(CHandler.java:601) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.MainDispatcher.dispatch(MainDispatcher.java:270) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.MainTranslator.performMainRun(MainTranslator.java:244) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.MainTranslator.translate(MainTranslator.java:206) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.MainTranslator.run(MainTranslator.java:115) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.MainTranslator.(MainTranslator.java:93) at de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieTranslatorObserver.finish(CACSL2BoogieTranslatorObserver.java:128) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runObserver(PluginConnector.java:168) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runTool(PluginConnector.java:151) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.run(PluginConnector.java:128) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.executePluginConnector(ToolchainWalker.java:232) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.processPlugin(ToolchainWalker.java:226) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walkUnprotected(ToolchainWalker.java:142) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walk(ToolchainWalker.java:104) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainManager$Toolchain.processToolchain(ToolchainManager.java:320) at de.uni_freiburg.informatik.ultimate.core.coreplugin.toolchain.DefaultToolchainJob.run(DefaultToolchainJob.java:145) at org.eclipse.core.internal.jobs.Worker.run(Worker.java:63) [2022-02-20 21:59:26,052 INFO L158 Benchmark]: Toolchain (without parser) took 1142.26ms. Allocated memory was 92.3MB in the beginning and 111.1MB in the end (delta: 18.9MB). Free memory was 69.2MB in the beginning and 55.5MB in the end (delta: 13.7MB). Peak memory consumption was 61.8MB. Max. memory is 16.1GB. [2022-02-20 21:59:26,052 INFO L158 Benchmark]: CDTParser took 0.14ms. Allocated memory is still 92.3MB. Free memory is still 72.2MB. There was no memory consumed. Max. memory is 16.1GB. [2022-02-20 21:59:26,053 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1140.57ms. Allocated memory was 92.3MB in the beginning and 111.1MB in the end (delta: 18.9MB). Free memory was 69.2MB in the beginning and 55.5MB in the end (delta: 13.7MB). Peak memory consumption was 61.8MB. Max. memory is 16.1GB. [2022-02-20 21:59:26,054 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.14ms. Allocated memory is still 92.3MB. Free memory is still 72.2MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1140.57ms. Allocated memory was 92.3MB in the beginning and 111.1MB in the end (delta: 18.9MB). Free memory was 69.2MB in the beginning and 55.5MB in the end (delta: 13.7MB). Peak memory consumption was 61.8MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - ExceptionOrErrorResult: AssertionError: HeapLValues must be converted to RValue before their value can be queried. de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: AssertionError: HeapLValues must be converted to RValue before their value can be queried.: de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.result.HeapLValue.getValue(HeapLValue.java:74) RESULT: Ultimate could not prove your program: Toolchain returned no result. Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-drivers--memstick--host--jmb38x_ms.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash ddf5a1a49f314301e8909becfbc4609d48a707110e74ebac2933b9b32da37a44 --- Real Ultimate output --- This is Ultimate 0.2.2-dev-03d7b7b [2022-02-20 21:59:27,587 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-02-20 21:59:27,590 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-02-20 21:59:27,622 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-02-20 21:59:27,623 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-02-20 21:59:27,627 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-02-20 21:59:27,629 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-02-20 21:59:27,634 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-02-20 21:59:27,637 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-02-20 21:59:27,642 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-02-20 21:59:27,643 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-02-20 21:59:27,645 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-02-20 21:59:27,646 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-02-20 21:59:27,657 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-02-20 21:59:27,659 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-02-20 21:59:27,663 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-02-20 21:59:27,664 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-02-20 21:59:27,665 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-02-20 21:59:27,669 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-02-20 21:59:27,671 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-02-20 21:59:27,675 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-02-20 21:59:27,676 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-02-20 21:59:27,677 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-02-20 21:59:27,678 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-02-20 21:59:27,683 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-02-20 21:59:27,683 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-02-20 21:59:27,683 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-02-20 21:59:27,685 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-02-20 21:59:27,685 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-02-20 21:59:27,686 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-02-20 21:59:27,686 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-02-20 21:59:27,687 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-02-20 21:59:27,688 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-02-20 21:59:27,689 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-02-20 21:59:27,690 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-02-20 21:59:27,690 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-02-20 21:59:27,691 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-02-20 21:59:27,691 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-02-20 21:59:27,691 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-02-20 21:59:27,692 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-02-20 21:59:27,693 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-02-20 21:59:27,694 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2022-02-20 21:59:27,722 INFO L113 SettingsManager]: Loading preferences was successful [2022-02-20 21:59:27,722 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-02-20 21:59:27,723 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-02-20 21:59:27,724 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-02-20 21:59:27,724 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-02-20 21:59:27,725 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-02-20 21:59:27,725 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-02-20 21:59:27,726 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-02-20 21:59:27,726 INFO L138 SettingsManager]: * Use SBE=true [2022-02-20 21:59:27,726 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-02-20 21:59:27,727 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-02-20 21:59:27,727 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-02-20 21:59:27,727 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-02-20 21:59:27,727 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-02-20 21:59:27,727 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-02-20 21:59:27,728 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-02-20 21:59:27,728 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-02-20 21:59:27,728 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-02-20 21:59:27,728 INFO L138 SettingsManager]: * Use constant arrays=true [2022-02-20 21:59:27,728 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-02-20 21:59:27,728 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-02-20 21:59:27,728 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-02-20 21:59:27,729 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-02-20 21:59:27,729 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 21:59:27,729 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-02-20 21:59:27,729 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-02-20 21:59:27,729 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-02-20 21:59:27,729 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2022-02-20 21:59:27,729 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2022-02-20 21:59:27,730 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-02-20 21:59:27,730 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-02-20 21:59:27,730 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-02-20 21:59:27,730 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-02-20 21:59:27,730 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ddf5a1a49f314301e8909becfbc4609d48a707110e74ebac2933b9b32da37a44 [2022-02-20 21:59:28,035 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-02-20 21:59:28,056 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-02-20 21:59:28,058 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-02-20 21:59:28,059 INFO L271 PluginConnector]: Initializing CDTParser... [2022-02-20 21:59:28,059 INFO L275 PluginConnector]: CDTParser initialized [2022-02-20 21:59:28,060 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-drivers--memstick--host--jmb38x_ms.ko-entry_point.cil.out.i [2022-02-20 21:59:28,117 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0b89d6605/9093d93ae6704f998f7aa87c7278e515/FLAGa3c72226d [2022-02-20 21:59:28,654 INFO L306 CDTParser]: Found 1 translation units. [2022-02-20 21:59:28,655 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-drivers--memstick--host--jmb38x_ms.ko-entry_point.cil.out.i [2022-02-20 21:59:28,679 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0b89d6605/9093d93ae6704f998f7aa87c7278e515/FLAGa3c72226d [2022-02-20 21:59:28,922 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0b89d6605/9093d93ae6704f998f7aa87c7278e515 [2022-02-20 21:59:28,923 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-02-20 21:59:28,926 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-02-20 21:59:28,927 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-02-20 21:59:28,928 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-02-20 21:59:28,930 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-02-20 21:59:28,931 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 09:59:28" (1/1) ... [2022-02-20 21:59:28,932 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2ba4da28 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:59:28, skipping insertion in model container [2022-02-20 21:59:28,932 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 09:59:28" (1/1) ... [2022-02-20 21:59:28,936 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-02-20 21:59:29,006 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-02-20 21:59:29,332 WARN L1246 CHandler]: Detected problem Invalid redeclaration of the name show at C: (*show)(struct kobject___0 * , struct attribute___0 * , char * ) [2411] [2022-02-20 21:59:29,333 WARN L1246 CHandler]: Detected problem Invalid redeclaration of the name store at C: (*store)(struct kobject___0 * , struct attribute___0 * , char const * , size_t ) [2412-2413] [2022-02-20 21:59:29,517 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-drivers--memstick--host--jmb38x_ms.ko-entry_point.cil.out.i[85029,85042] [2022-02-20 21:59:30,035 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 21:59:30,058 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-02-20 21:59:30,097 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-02-20 21:59:30,139 WARN L1246 CHandler]: Detected problem Invalid redeclaration of the name show at C: (*show)(struct kobject___0 * , struct attribute___0 * , char * ) [2411] [2022-02-20 21:59:30,139 WARN L1246 CHandler]: Detected problem Invalid redeclaration of the name store at C: (*store)(struct kobject___0 * , struct attribute___0 * , char const * , size_t ) [2412-2413] [2022-02-20 21:59:30,150 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-drivers--memstick--host--jmb38x_ms.ko-entry_point.cil.out.i[85029,85042] [2022-02-20 21:59:30,282 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 21:59:30,292 INFO L203 MainTranslator]: Completed pre-run [2022-02-20 21:59:30,340 WARN L1246 CHandler]: Detected problem Invalid redeclaration of the name show at C: (*show)(struct kobject___0 * , struct attribute___0 * , char * ) [2411] [2022-02-20 21:59:30,341 WARN L1246 CHandler]: Detected problem Invalid redeclaration of the name store at C: (*store)(struct kobject___0 * , struct attribute___0 * , char const * , size_t ) [2412-2413] [2022-02-20 21:59:30,348 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-drivers--memstick--host--jmb38x_ms.ko-entry_point.cil.out.i[85029,85042] [2022-02-20 21:59:30,472 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 21:59:30,514 INFO L208 MainTranslator]: Completed translation [2022-02-20 21:59:30,514 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:59:30 WrapperNode [2022-02-20 21:59:30,515 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-02-20 21:59:30,516 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-02-20 21:59:30,516 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-02-20 21:59:30,516 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-02-20 21:59:30,521 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:59:30" (1/1) ... [2022-02-20 21:59:30,578 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:59:30" (1/1) ... [2022-02-20 21:59:30,763 INFO L137 Inliner]: procedures = 188, calls = 1203, calls flagged for inlining = 104, calls inlined = 97, statements flattened = 2928 [2022-02-20 21:59:30,764 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-02-20 21:59:30,765 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-02-20 21:59:30,765 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-02-20 21:59:30,765 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-02-20 21:59:30,772 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:59:30" (1/1) ... [2022-02-20 21:59:30,772 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:59:30" (1/1) ... [2022-02-20 21:59:30,796 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:59:30" (1/1) ... [2022-02-20 21:59:30,797 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:59:30" (1/1) ... [2022-02-20 21:59:30,921 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:59:30" (1/1) ... [2022-02-20 21:59:30,931 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:59:30" (1/1) ... [2022-02-20 21:59:30,954 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:59:30" (1/1) ... [2022-02-20 21:59:30,978 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-02-20 21:59:30,980 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-02-20 21:59:30,980 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-02-20 21:59:30,980 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-02-20 21:59:30,980 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:59:30" (1/1) ... [2022-02-20 21:59:30,985 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 21:59:30,992 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 21:59:31,001 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-02-20 21:59:31,008 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-02-20 21:59:31,029 INFO L130 BoogieDeclarations]: Found specification of procedure get_dma_ops [2022-02-20 21:59:31,029 INFO L138 BoogieDeclarations]: Found implementation of procedure get_dma_ops [2022-02-20 21:59:31,029 INFO L130 BoogieDeclarations]: Found specification of procedure sg_page [2022-02-20 21:59:31,030 INFO L138 BoogieDeclarations]: Found implementation of procedure sg_page [2022-02-20 21:59:31,030 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2022-02-20 21:59:31,030 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2022-02-20 21:59:31,030 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2022-02-20 21:59:31,030 INFO L130 BoogieDeclarations]: Found specification of procedure pci_release_regions [2022-02-20 21:59:31,030 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_release_regions [2022-02-20 21:59:31,030 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-02-20 21:59:31,030 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-02-20 21:59:31,030 INFO L130 BoogieDeclarations]: Found specification of procedure lowmem_page_address [2022-02-20 21:59:31,031 INFO L138 BoogieDeclarations]: Found implementation of procedure lowmem_page_address [2022-02-20 21:59:31,031 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_spin_lock [2022-02-20 21:59:31,031 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_spin_lock [2022-02-20 21:59:31,031 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-02-20 21:59:31,031 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-02-20 21:59:31,031 INFO L130 BoogieDeclarations]: Found specification of procedure pci_choose_state [2022-02-20 21:59:31,031 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_choose_state [2022-02-20 21:59:31,031 INFO L130 BoogieDeclarations]: Found specification of procedure activate_suitable_timer_2 [2022-02-20 21:59:31,031 INFO L138 BoogieDeclarations]: Found implementation of procedure activate_suitable_timer_2 [2022-02-20 21:59:31,032 INFO L130 BoogieDeclarations]: Found specification of procedure memstick_priv [2022-02-20 21:59:31,032 INFO L138 BoogieDeclarations]: Found implementation of procedure memstick_priv [2022-02-20 21:59:31,032 INFO L130 BoogieDeclarations]: Found specification of procedure pci_read_config_byte [2022-02-20 21:59:31,032 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_read_config_byte [2022-02-20 21:59:31,032 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-02-20 21:59:31,032 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-02-20 21:59:31,032 INFO L130 BoogieDeclarations]: Found specification of procedure arch_local_irq_restore [2022-02-20 21:59:31,032 INFO L138 BoogieDeclarations]: Found implementation of procedure arch_local_irq_restore [2022-02-20 21:59:31,033 INFO L130 BoogieDeclarations]: Found specification of procedure pci_disable_device [2022-02-20 21:59:31,033 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_disable_device [2022-02-20 21:59:31,033 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-02-20 21:59:31,033 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-02-20 21:59:31,033 INFO L130 BoogieDeclarations]: Found specification of procedure pci_set_drvdata [2022-02-20 21:59:31,033 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_set_drvdata [2022-02-20 21:59:31,033 INFO L130 BoogieDeclarations]: Found specification of procedure valid_dma_direction [2022-02-20 21:59:31,033 INFO L138 BoogieDeclarations]: Found implementation of procedure valid_dma_direction [2022-02-20 21:59:31,033 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-02-20 21:59:31,034 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-02-20 21:59:31,034 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-02-20 21:59:31,034 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-02-20 21:59:31,034 INFO L130 BoogieDeclarations]: Found specification of procedure jmb38x_ms_transfer_data [2022-02-20 21:59:31,034 INFO L138 BoogieDeclarations]: Found implementation of procedure jmb38x_ms_transfer_data [2022-02-20 21:59:31,034 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-02-20 21:59:31,034 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-02-20 21:59:31,034 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_timer_2 [2022-02-20 21:59:31,035 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_timer_2 [2022-02-20 21:59:31,035 INFO L130 BoogieDeclarations]: Found specification of procedure pci_enable_device [2022-02-20 21:59:31,035 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_enable_device [2022-02-20 21:59:31,035 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-02-20 21:59:31,035 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-02-20 21:59:31,035 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_percpu_size [2022-02-20 21:59:31,035 INFO L130 BoogieDeclarations]: Found specification of procedure jmb38x_ms_complete_cmd [2022-02-20 21:59:31,035 INFO L138 BoogieDeclarations]: Found implementation of procedure jmb38x_ms_complete_cmd [2022-02-20 21:59:31,035 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_irq_1 [2022-02-20 21:59:31,036 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_irq_1 [2022-02-20 21:59:31,036 INFO L130 BoogieDeclarations]: Found specification of procedure trace_hardirqs_off [2022-02-20 21:59:31,036 INFO L138 BoogieDeclarations]: Found implementation of procedure trace_hardirqs_off [2022-02-20 21:59:31,036 INFO L130 BoogieDeclarations]: Found specification of procedure pci_set_master [2022-02-20 21:59:31,036 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_set_master [2022-02-20 21:59:31,036 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-02-20 21:59:31,036 INFO L130 BoogieDeclarations]: Found specification of procedure pci_get_drvdata [2022-02-20 21:59:31,036 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_get_drvdata [2022-02-20 21:59:31,036 INFO L130 BoogieDeclarations]: Found specification of procedure memstick_next_req [2022-02-20 21:59:31,037 INFO L138 BoogieDeclarations]: Found implementation of procedure memstick_next_req [2022-02-20 21:59:31,037 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_spin_unlock [2022-02-20 21:59:31,037 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_spin_unlock [2022-02-20 21:59:31,037 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2022-02-20 21:59:31,037 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2022-02-20 21:59:31,037 INFO L130 BoogieDeclarations]: Found specification of procedure jmb38x_ms_pmos [2022-02-20 21:59:31,037 INFO L138 BoogieDeclarations]: Found implementation of procedure jmb38x_ms_pmos [2022-02-20 21:59:31,037 INFO L130 BoogieDeclarations]: Found specification of procedure jmb38x_ms_remove [2022-02-20 21:59:31,037 INFO L138 BoogieDeclarations]: Found implementation of procedure jmb38x_ms_remove [2022-02-20 21:59:31,038 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2022-02-20 21:59:31,038 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2022-02-20 21:59:31,038 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-02-20 21:59:31,038 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2022-02-20 21:59:31,038 INFO L130 BoogieDeclarations]: Found specification of procedure iounmap [2022-02-20 21:59:31,038 INFO L138 BoogieDeclarations]: Found implementation of procedure iounmap [2022-02-20 21:59:31,038 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-02-20 21:59:31,038 INFO L130 BoogieDeclarations]: Found specification of procedure pci_set_power_state [2022-02-20 21:59:31,039 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_set_power_state [2022-02-20 21:59:31,039 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-02-20 21:59:31,039 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2022-02-20 21:59:31,039 INFO L130 BoogieDeclarations]: Found specification of procedure pci_write_config_byte [2022-02-20 21:59:31,039 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_write_config_byte [2022-02-20 21:59:31,039 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2022-02-20 21:59:31,039 INFO L130 BoogieDeclarations]: Found specification of procedure jmb38x_ms_free_host [2022-02-20 21:59:31,039 INFO L138 BoogieDeclarations]: Found implementation of procedure jmb38x_ms_free_host [2022-02-20 21:59:31,039 INFO L130 BoogieDeclarations]: Found specification of procedure readl [2022-02-20 21:59:31,040 INFO L138 BoogieDeclarations]: Found implementation of procedure readl [2022-02-20 21:59:31,040 INFO L130 BoogieDeclarations]: Found specification of procedure writel [2022-02-20 21:59:31,040 INFO L138 BoogieDeclarations]: Found implementation of procedure writel [2022-02-20 21:59:31,040 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock [2022-02-20 21:59:31,040 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock [2022-02-20 21:59:31,040 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-02-20 21:59:31,040 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-02-20 21:59:31,040 INFO L130 BoogieDeclarations]: Found specification of procedure jmb38x_ms_issue_cmd [2022-02-20 21:59:31,040 INFO L138 BoogieDeclarations]: Found implementation of procedure jmb38x_ms_issue_cmd [2022-02-20 21:59:31,041 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-02-20 21:59:31,041 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-02-20 21:59:31,041 INFO L130 BoogieDeclarations]: Found specification of procedure memstick_detect_change [2022-02-20 21:59:31,041 INFO L138 BoogieDeclarations]: Found implementation of procedure memstick_detect_change [2022-02-20 21:59:31,429 INFO L234 CfgBuilder]: Building ICFG [2022-02-20 21:59:31,431 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-02-20 21:59:33,504 INFO L766 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-02-20 21:59:42,199 INFO L275 CfgBuilder]: Performing block encoding [2022-02-20 21:59:42,222 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-02-20 21:59:42,223 INFO L299 CfgBuilder]: Removed 0 assume(true) statements. [2022-02-20 21:59:42,225 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 09:59:42 BoogieIcfgContainer [2022-02-20 21:59:42,225 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-02-20 21:59:42,228 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-02-20 21:59:42,228 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-02-20 21:59:42,230 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-02-20 21:59:42,230 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.02 09:59:28" (1/3) ... [2022-02-20 21:59:42,234 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2c62512b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 09:59:42, skipping insertion in model container [2022-02-20 21:59:42,239 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:59:30" (2/3) ... [2022-02-20 21:59:42,239 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2c62512b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 09:59:42, skipping insertion in model container [2022-02-20 21:59:42,240 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 09:59:42" (3/3) ... [2022-02-20 21:59:42,245 INFO L111 eAbstractionObserver]: Analyzing ICFG 43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-drivers--memstick--host--jmb38x_ms.ko-entry_point.cil.out.i [2022-02-20 21:59:42,258 INFO L205 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-02-20 21:59:42,259 INFO L164 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-02-20 21:59:42,302 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-02-20 21:59:42,307 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-02-20 21:59:42,308 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-02-20 21:59:42,346 INFO L276 IsEmpty]: Start isEmpty. Operand has 875 states, 662 states have (on average 1.3700906344410877) internal successors, (907), 685 states have internal predecessors, (907), 170 states have call successors, (170), 42 states have call predecessors, (170), 41 states have return successors, (164), 160 states have call predecessors, (164), 164 states have call successors, (164) [2022-02-20 21:59:42,366 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2022-02-20 21:59:42,367 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 21:59:42,368 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 21:59:42,368 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 21:59:42,373 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 21:59:42,374 INFO L85 PathProgramCache]: Analyzing trace with hash -1623853226, now seen corresponding path program 1 times [2022-02-20 21:59:42,385 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 21:59:42,385 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [112826465] [2022-02-20 21:59:42,386 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 21:59:42,386 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 21:59:42,386 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 21:59:42,409 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 21:59:42,415 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2022-02-20 21:59:42,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 21:59:42,965 INFO L263 TraceCheckSpWp]: Trace formula consists of 1005 conjuncts, 3 conjunts are in the unsatisfiable core [2022-02-20 21:59:43,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 21:59:43,028 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 21:59:43,337 INFO L290 TraceCheckUtils]: 0: Hoare triple {878#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv64, 0bv64;assume 0bv1 == #valid[0bv64];assume ~bvult64(0bv64, #StackHeapBarrier);call #Ultimate.allocInit(2bv64, 1bv64);call write~init~intINTTYPE1(48bv8, 1bv64, 0bv64, 1bv64);call write~init~intINTTYPE1(0bv8, 1bv64, 1bv64, 1bv64);call #Ultimate.allocInit(106bv64, 2bv64);call #Ultimate.allocInit(10bv64, 3bv64);call #Ultimate.allocInit(20bv64, 4bv64);call #Ultimate.allocInit(224bv64, 5bv64);call #Ultimate.allocInit(17bv64, 6bv64);call #Ultimate.allocInit(17bv64, 7bv64);call #Ultimate.allocInit(10bv64, 8bv64);call #Ultimate.allocInit(20bv64, 9bv64);call #Ultimate.allocInit(224bv64, 10bv64);call #Ultimate.allocInit(14bv64, 11bv64);call #Ultimate.allocInit(14bv64, 12bv64);call #Ultimate.allocInit(10bv64, 13bv64);call #Ultimate.allocInit(20bv64, 14bv64);call #Ultimate.allocInit(224bv64, 15bv64);call #Ultimate.allocInit(13bv64, 16bv64);call #Ultimate.allocInit(13bv64, 17bv64);call #Ultimate.allocInit(10bv64, 18bv64);call #Ultimate.allocInit(20bv64, 19bv64);call #Ultimate.allocInit(224bv64, 20bv64);call #Ultimate.allocInit(14bv64, 21bv64);call #Ultimate.allocInit(14bv64, 22bv64);call #Ultimate.allocInit(10bv64, 23bv64);call #Ultimate.allocInit(20bv64, 24bv64);call #Ultimate.allocInit(224bv64, 25bv64);call #Ultimate.allocInit(28bv64, 26bv64);call #Ultimate.allocInit(28bv64, 27bv64);call #Ultimate.allocInit(10bv64, 28bv64);call #Ultimate.allocInit(23bv64, 29bv64);call #Ultimate.allocInit(224bv64, 30bv64);call #Ultimate.allocInit(16bv64, 31bv64);call #Ultimate.allocInit(16bv64, 32bv64);call #Ultimate.allocInit(10bv64, 33bv64);call #Ultimate.allocInit(23bv64, 34bv64);call #Ultimate.allocInit(224bv64, 35bv64);call #Ultimate.allocInit(15bv64, 36bv64);call #Ultimate.allocInit(15bv64, 37bv64);call #Ultimate.allocInit(10bv64, 38bv64);call #Ultimate.allocInit(23bv64, 39bv64);call #Ultimate.allocInit(224bv64, 40bv64);call #Ultimate.allocInit(16bv64, 41bv64);call #Ultimate.allocInit(16bv64, 42bv64);call #Ultimate.allocInit(10bv64, 43bv64);call #Ultimate.allocInit(14bv64, 44bv64);call #Ultimate.allocInit(224bv64, 45bv64);call #Ultimate.allocInit(19bv64, 46bv64);call #Ultimate.allocInit(19bv64, 47bv64);call #Ultimate.allocInit(10bv64, 48bv64);call #Ultimate.allocInit(14bv64, 49bv64);call #Ultimate.allocInit(224bv64, 50bv64);call #Ultimate.allocInit(9bv64, 51bv64);call #Ultimate.allocInit(9bv64, 52bv64);call #Ultimate.allocInit(10bv64, 53bv64);call #Ultimate.allocInit(14bv64, 54bv64);call #Ultimate.allocInit(224bv64, 55bv64);call #Ultimate.allocInit(15bv64, 56bv64);call #Ultimate.allocInit(15bv64, 57bv64);call #Ultimate.allocInit(10bv64, 58bv64);call #Ultimate.allocInit(16bv64, 59bv64);call #Ultimate.allocInit(224bv64, 60bv64);call #Ultimate.allocInit(7bv64, 61bv64);call write~init~intINTTYPE1(97bv8, 61bv64, 0bv64, 1bv64);call write~init~intINTTYPE1(98bv8, 61bv64, 1bv64, 1bv64);call write~init~intINTTYPE1(111bv8, 61bv64, 2bv64, 1bv64);call write~init~intINTTYPE1(114bv8, 61bv64, 3bv64, 1bv64);call write~init~intINTTYPE1(116bv8, 61bv64, 4bv64, 1bv64);call write~init~intINTTYPE1(10bv8, 61bv64, 5bv64, 1bv64);call write~init~intINTTYPE1(0bv8, 61bv64, 6bv64, 1bv64);call #Ultimate.allocInit(7bv64, 62bv64);call write~init~intINTTYPE1(97bv8, 62bv64, 0bv64, 1bv64);call write~init~intINTTYPE1(98bv8, 62bv64, 1bv64, 1bv64);call write~init~intINTTYPE1(111bv8, 62bv64, 2bv64, 1bv64);call write~init~intINTTYPE1(114bv8, 62bv64, 3bv64, 1bv64);call write~init~intINTTYPE1(116bv8, 62bv64, 4bv64, 1bv64);call write~init~intINTTYPE1(10bv8, 62bv64, 5bv64, 1bv64);call write~init~intINTTYPE1(0bv8, 62bv64, 6bv64, 1bv64);call #Ultimate.allocInit(10bv64, 63bv64);call #Ultimate.allocInit(22bv64, 64bv64);call #Ultimate.allocInit(224bv64, 65bv64);call #Ultimate.allocInit(16bv64, 66bv64);call #Ultimate.allocInit(16bv64, 67bv64);call #Ultimate.allocInit(10bv64, 68bv64);call #Ultimate.allocInit(16bv64, 69bv64);call #Ultimate.allocInit(224bv64, 70bv64);call #Ultimate.allocInit(19bv64, 71bv64);call #Ultimate.allocInit(19bv64, 72bv64);call #Ultimate.allocInit(10bv64, 73bv64);call #Ultimate.allocInit(16bv64, 74bv64);call #Ultimate.allocInit(224bv64, 75bv64);call #Ultimate.allocInit(15bv64, 76bv64);call #Ultimate.allocInit(15bv64, 77bv64);call #Ultimate.allocInit(10bv64, 78bv64);call #Ultimate.allocInit(20bv64, 79bv64);call #Ultimate.allocInit(224bv64, 80bv64);call #Ultimate.allocInit(10bv64, 81bv64);call #Ultimate.allocInit(10bv64, 82bv64);call #Ultimate.allocInit(10bv64, 83bv64);call #Ultimate.allocInit(20bv64, 84bv64);call #Ultimate.allocInit(224bv64, 85bv64);call #Ultimate.allocInit(11bv64, 86bv64);call #Ultimate.allocInit(11bv64, 87bv64);call #Ultimate.allocInit(10bv64, 88bv64);call #Ultimate.allocInit(20bv64, 89bv64);call #Ultimate.allocInit(224bv64, 90bv64);call #Ultimate.allocInit(31bv64, 91bv64);call #Ultimate.allocInit(31bv64, 92bv64);call #Ultimate.allocInit(10bv64, 93bv64);call #Ultimate.allocInit(15bv64, 94bv64);call #Ultimate.allocInit(224bv64, 95bv64);call #Ultimate.allocInit(28bv64, 96bv64);call #Ultimate.allocInit(28bv64, 97bv64);call #Ultimate.allocInit(10bv64, 98bv64);call #Ultimate.allocInit(15bv64, 99bv64);call #Ultimate.allocInit(224bv64, 100bv64);call #Ultimate.allocInit(28bv64, 101bv64);call #Ultimate.allocInit(28bv64, 102bv64);call #Ultimate.allocInit(10bv64, 103bv64);call #Ultimate.allocInit(15bv64, 104bv64);call #Ultimate.allocInit(224bv64, 105bv64);call #Ultimate.allocInit(42bv64, 106bv64);call #Ultimate.allocInit(42bv64, 107bv64);call #Ultimate.allocInit(22bv64, 108bv64);call #Ultimate.allocInit(17bv64, 109bv64);call #Ultimate.allocInit(10bv64, 110bv64);call #Ultimate.allocInit(10bv64, 111bv64);call #Ultimate.allocInit(17bv64, 112bv64);call #Ultimate.allocInit(224bv64, 113bv64);call #Ultimate.allocInit(16bv64, 114bv64);call #Ultimate.allocInit(16bv64, 115bv64);call #Ultimate.allocInit(10bv64, 116bv64);call #Ultimate.allocInit(17bv64, 117bv64);call #Ultimate.allocInit(224bv64, 118bv64);call #Ultimate.allocInit(14bv64, 119bv64);call #Ultimate.allocInit(14bv64, 120bv64);call #Ultimate.allocInit(10bv64, 121bv64);call #Ultimate.allocInit(10bv64, 122bv64);~ldv_irq_1_3~0 := 0bv32;~ldv_irq_data_1_1~0.base, ~ldv_irq_data_1_1~0.offset := 0bv64, 0bv64;~ldv_irq_1_0~0 := 0bv32;~ldv_timer_list_2_0~0.base, ~ldv_timer_list_2_0~0.offset := 0bv64, 0bv64;~ldv_timer_list_2_1~0.base, ~ldv_timer_list_2_1~0.offset := 0bv64, 0bv64;~ldv_timer_2_1~0 := 0bv32;~ldv_irq_data_1_0~0.base, ~ldv_irq_data_1_0~0.offset := 0bv64, 0bv64;~ldv_state_variable_0~0 := 0bv32;~ldv_timer_2_0~0 := 0bv32;~ldv_state_variable_2~0 := 0bv32;~ldv_irq_data_1_3~0.base, ~ldv_irq_data_1_3~0.offset := 0bv64, 0bv64;~ldv_irq_data_1_2~0.base, ~ldv_irq_data_1_2~0.offset := 0bv64, 0bv64;~jmb38x_ms_driver_group0~0.base, ~jmb38x_ms_driver_group0~0.offset := 0bv64, 0bv64;~ldv_timer_2_2~0 := 0bv32;~ldv_irq_1_2~0 := 0bv32;~ldv_timer_2_3~0 := 0bv32;~LDV_IN_INTERRUPT~0 := 1bv32;~ldv_irq_1_1~0 := 0bv32;~ldv_irq_line_1_3~0 := 0bv32;~ldv_state_variable_3~0 := 0bv32;~ldv_irq_line_1_0~0 := 0bv32;~ref_cnt~0 := 0bv32;~ldv_timer_list_2_3~0.base, ~ldv_timer_list_2_3~0.offset := 0bv64, 0bv64;~ldv_irq_line_1_1~0 := 0bv32;~ldv_state_variable_1~0 := 0bv32;~ldv_timer_list_2_2~0.base, ~ldv_timer_list_2_2~0.offset := 0bv64, 0bv64;~ldv_irq_line_1_2~0 := 0bv32;~no_dma~0 := 0bv8;~#jmb38x_ms_id_tbl~0.base, ~#jmb38x_ms_id_tbl~0.offset := 123bv64, 0bv64;call #Ultimate.allocInit(128bv64, 123bv64);call write~init~intINTTYPE4(6523bv32, ~#jmb38x_ms_id_tbl~0.base, ~#jmb38x_ms_id_tbl~0.offset, 4bv64);call write~init~intINTTYPE4(9091bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(4bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(4294967295bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(8bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(4294967295bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(12bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(16bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(20bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE8(0bv64, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(24bv64, ~#jmb38x_ms_id_tbl~0.offset), 8bv64);call write~init~intINTTYPE4(6523bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(32bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(9096bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(36bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(4294967295bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(40bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(4294967295bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(44bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(48bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(52bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE8(0bv64, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(56bv64, ~#jmb38x_ms_id_tbl~0.offset), 8bv64);call write~init~intINTTYPE4(6523bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(64bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(9107bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(68bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(4294967295bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(72bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(4294967295bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(76bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(80bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(84bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE8(0bv64, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(88bv64, ~#jmb38x_ms_id_tbl~0.offset), 8bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(96bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(100bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(104bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(108bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(112bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(116bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE8(0bv64, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(120bv64, ~#jmb38x_ms_id_tbl~0.offset), 8bv64);~#jmb38x_ms_driver~0.base, ~#jmb38x_ms_driver~0.offset := 124bv64, 0bv64;call #Ultimate.allocInit(301bv64, 124bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~#jmb38x_ms_driver~0.offset, 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(8bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(121bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(16bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(~#jmb38x_ms_id_tbl~0.base, ~#jmb38x_ms_id_tbl~0.offset, ~#jmb38x_ms_driver~0.base, ~bvadd64(24bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(#funAddr~jmb38x_ms_probe.base, #funAddr~jmb38x_ms_probe.offset, ~#jmb38x_ms_driver~0.base, ~bvadd64(32bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(#funAddr~jmb38x_ms_remove.base, #funAddr~jmb38x_ms_remove.offset, ~#jmb38x_ms_driver~0.base, ~bvadd64(40bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(#funAddr~jmb38x_ms_suspend.base, #funAddr~jmb38x_ms_suspend.offset, ~#jmb38x_ms_driver~0.base, ~bvadd64(48bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(56bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(64bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(#funAddr~jmb38x_ms_resume.base, #funAddr~jmb38x_ms_resume.offset, ~#jmb38x_ms_driver~0.base, ~bvadd64(72bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(80bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(88bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(96bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(104bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(112bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(120bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(128bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~intINTTYPE1(0bv8, ~#jmb38x_ms_driver~0.base, ~bvadd64(136bv64, ~#jmb38x_ms_driver~0.offset), 1bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(137bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(145bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(153bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(161bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(169bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(177bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(185bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(193bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(201bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(209bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_driver~0.base, ~bvadd64(217bv64, ~#jmb38x_ms_driver~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_driver~0.base, ~bvadd64(221bv64, ~#jmb38x_ms_driver~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_driver~0.base, ~bvadd64(225bv64, ~#jmb38x_ms_driver~0.offset), 4bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(229bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(237bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(245bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(253bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(261bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_driver~0.base, ~bvadd64(269bv64, ~#jmb38x_ms_driver~0.offset), 4bv64);call write~init~intINTTYPE8(0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(273bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(285bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(293bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);~__mod_pci__jmb38x_ms_id_tbl_device_table~0.vendor := 0bv32;~__mod_pci__jmb38x_ms_id_tbl_device_table~0.device := 0bv32;~__mod_pci__jmb38x_ms_id_tbl_device_table~0.subvendor := 0bv32;~__mod_pci__jmb38x_ms_id_tbl_device_table~0.subdevice := 0bv32;~__mod_pci__jmb38x_ms_id_tbl_device_table~0.class := 0bv32;~__mod_pci__jmb38x_ms_id_tbl_device_table~0.class_mask := 0bv32;~__mod_pci__jmb38x_ms_id_tbl_device_table~0.driver_data := 0bv64;~ldv_retval_0~0 := 0bv32;~ldv_retval_1~0 := 0bv32;~ldv_retval_3~0 := 0bv32;~ldv_retval_2~0 := 0bv32;~ldv_spin~0 := 0bv32; {878#true} is VALID [2022-02-20 21:59:43,342 INFO L290 TraceCheckUtils]: 1: Hoare triple {878#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret654#1.base, main_#t~ret654#1.offset, main_#t~memset~res655#1.base, main_#t~memset~res655#1.offset, main_#t~nondet656#1, main_#t~switch657#1, main_#t~nondet658#1, main_#t~switch659#1, main_#t~ret660#1, main_#t~nondet661#1, main_#t~switch662#1, main_#t~ret663#1, main_#t~mem664#1, main_#t~ret665#1, main_#t~ret666#1, main_~ldvarg1~0#1.base, main_~ldvarg1~0#1.offset, main_~tmp~47#1.base, main_~tmp~47#1.offset, main_~#ldvarg0~0#1.base, main_~#ldvarg0~0#1.offset, main_~tmp___0~22#1, main_~tmp___1~14#1, main_~tmp___2~9#1;havoc main_~ldvarg1~0#1.base, main_~ldvarg1~0#1.offset;havoc main_~tmp~47#1.base, main_~tmp~47#1.offset;call main_~#ldvarg0~0#1.base, main_~#ldvarg0~0#1.offset := #Ultimate.allocOnStack(4bv64);havoc main_~tmp___0~22#1;havoc main_~tmp___1~14#1;havoc main_~tmp___2~9#1; {878#true} is VALID [2022-02-20 21:59:43,343 INFO L272 TraceCheckUtils]: 2: Hoare triple {878#true} call main_#t~ret654#1.base, main_#t~ret654#1.offset := ldv_zalloc(32bv64); {878#true} is VALID [2022-02-20 21:59:43,343 INFO L290 TraceCheckUtils]: 3: Hoare triple {878#true} ~size#1 := #in~size#1;havoc ~p~1#1.base, ~p~1#1.offset;havoc ~tmp~5#1.base, ~tmp~5#1.offset;havoc ~tmp___0~1#1;~tmp___0~1#1 := #t~nondet39#1;havoc #t~nondet39#1; {878#true} is VALID [2022-02-20 21:59:43,344 INFO L290 TraceCheckUtils]: 4: Hoare triple {878#true} assume 0bv32 != ~tmp___0~1#1;#res#1.base, #res#1.offset := 0bv64, 0bv64; {878#true} is VALID [2022-02-20 21:59:43,344 INFO L290 TraceCheckUtils]: 5: Hoare triple {878#true} assume true; {878#true} is VALID [2022-02-20 21:59:43,344 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {878#true} {878#true} #2336#return; {878#true} is VALID [2022-02-20 21:59:43,344 INFO L290 TraceCheckUtils]: 7: Hoare triple {878#true} main_~tmp~47#1.base, main_~tmp~47#1.offset := main_#t~ret654#1.base, main_#t~ret654#1.offset;havoc main_#t~ret654#1.base, main_#t~ret654#1.offset;main_~ldvarg1~0#1.base, main_~ldvarg1~0#1.offset := main_~tmp~47#1.base, main_~tmp~47#1.offset;assume { :begin_inline_ldv_initialize } true; {878#true} is VALID [2022-02-20 21:59:43,345 INFO L290 TraceCheckUtils]: 8: Hoare triple {878#true} assume { :end_inline_ldv_initialize } true;assume { :begin_inline_#Ultimate.C_memset } true;#Ultimate.C_memset_#ptr#1.base, #Ultimate.C_memset_#ptr#1.offset, #Ultimate.C_memset_#value#1, #Ultimate.C_memset_#amount#1 := main_~#ldvarg0~0#1.base, main_~#ldvarg0~0#1.offset, 0bv32, 4bv64;havoc #Ultimate.C_memset_#res#1.base, #Ultimate.C_memset_#res#1.offset;havoc #Ultimate.C_memset_#t~loopctr697#1;#Ultimate.C_memset_#t~loopctr697#1 := 0bv64; {907#(and (= |ULTIMATE.start_#Ultimate.C_memset_#amount#1| (_ bv4 64)) (= (_ bv0 64) |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr697#1|))} is VALID [2022-02-20 21:59:43,346 INFO L290 TraceCheckUtils]: 9: Hoare triple {907#(and (= |ULTIMATE.start_#Ultimate.C_memset_#amount#1| (_ bv4 64)) (= (_ bv0 64) |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr697#1|))} assume !~bvult64(#Ultimate.C_memset_#t~loopctr697#1, #Ultimate.C_memset_#amount#1); {879#false} is VALID [2022-02-20 21:59:43,346 INFO L290 TraceCheckUtils]: 10: Hoare triple {879#false} assume #Ultimate.C_memset_#res#1.base == #Ultimate.C_memset_#ptr#1.base && #Ultimate.C_memset_#res#1.offset == #Ultimate.C_memset_#ptr#1.offset;main_#t~memset~res655#1.base, main_#t~memset~res655#1.offset := #Ultimate.C_memset_#res#1.base, #Ultimate.C_memset_#res#1.offset;assume { :end_inline_#Ultimate.C_memset } true;havoc main_#t~memset~res655#1.base, main_#t~memset~res655#1.offset;~ldv_state_variable_1~0 := 1bv32;~ref_cnt~0 := 0bv32;~ldv_state_variable_0~0 := 1bv32;~ldv_state_variable_3~0 := 0bv32;assume { :begin_inline_timer_init_2 } true;~ldv_timer_2_0~0 := 0bv32;~ldv_timer_2_1~0 := 0bv32;~ldv_timer_2_2~0 := 0bv32;~ldv_timer_2_3~0 := 0bv32; {879#false} is VALID [2022-02-20 21:59:43,347 INFO L290 TraceCheckUtils]: 11: Hoare triple {879#false} assume { :end_inline_timer_init_2 } true;~ldv_state_variable_2~0 := 1bv32; {879#false} is VALID [2022-02-20 21:59:43,347 INFO L290 TraceCheckUtils]: 12: Hoare triple {879#false} main_~tmp___0~22#1 := main_#t~nondet656#1;havoc main_#t~nondet656#1;main_#t~switch657#1 := 0bv32 == main_~tmp___0~22#1; {879#false} is VALID [2022-02-20 21:59:43,347 INFO L290 TraceCheckUtils]: 13: Hoare triple {879#false} assume !main_#t~switch657#1;main_#t~switch657#1 := main_#t~switch657#1 || 1bv32 == main_~tmp___0~22#1; {879#false} is VALID [2022-02-20 21:59:43,347 INFO L290 TraceCheckUtils]: 14: Hoare triple {879#false} assume !main_#t~switch657#1;main_#t~switch657#1 := main_#t~switch657#1 || 2bv32 == main_~tmp___0~22#1; {879#false} is VALID [2022-02-20 21:59:43,348 INFO L290 TraceCheckUtils]: 15: Hoare triple {879#false} assume main_#t~switch657#1; {879#false} is VALID [2022-02-20 21:59:43,348 INFO L290 TraceCheckUtils]: 16: Hoare triple {879#false} assume 0bv32 != ~ldv_state_variable_3~0;main_~tmp___2~9#1 := main_#t~nondet661#1;havoc main_#t~nondet661#1;main_#t~switch662#1 := 0bv32 == main_~tmp___2~9#1; {879#false} is VALID [2022-02-20 21:59:43,348 INFO L290 TraceCheckUtils]: 17: Hoare triple {879#false} assume main_#t~switch662#1; {879#false} is VALID [2022-02-20 21:59:43,348 INFO L290 TraceCheckUtils]: 18: Hoare triple {879#false} assume 1bv32 == ~ldv_state_variable_3~0;assume { :begin_inline_jmb38x_ms_probe } true;jmb38x_ms_probe_#in~pdev#1.base, jmb38x_ms_probe_#in~pdev#1.offset, jmb38x_ms_probe_#in~dev_id#1.base, jmb38x_ms_probe_#in~dev_id#1.offset := ~jmb38x_ms_driver_group0~0.base, ~jmb38x_ms_driver_group0~0.offset, main_~ldvarg1~0#1.base, main_~ldvarg1~0#1.offset;havoc jmb38x_ms_probe_#res#1;havoc jmb38x_ms_probe_#t~ret606#1, jmb38x_ms_probe_#t~ret607#1, jmb38x_ms_probe_#t~ret608#1, jmb38x_ms_probe_#t~ret609#1, jmb38x_ms_probe_#t~ret610#1, jmb38x_ms_probe_#t~ret611#1.base, jmb38x_ms_probe_#t~ret611#1.offset, jmb38x_ms_probe_#t~ret612#1.base, jmb38x_ms_probe_#t~ret612#1.offset, jmb38x_ms_probe_#t~mem613#1.base, jmb38x_ms_probe_#t~mem613#1.offset, jmb38x_ms_probe_#t~mem614#1.base, jmb38x_ms_probe_#t~mem614#1.offset, jmb38x_ms_probe_#t~ret615#1, jmb38x_ms_probe_#t~mem616#1.base, jmb38x_ms_probe_#t~mem616#1.offset, jmb38x_ms_probe_#t~mem617#1, jmb38x_ms_probe_~pdev#1.base, jmb38x_ms_probe_~pdev#1.offset, jmb38x_ms_probe_~dev_id#1.base, jmb38x_ms_probe_~dev_id#1.offset, jmb38x_ms_probe_~jm~2#1.base, jmb38x_ms_probe_~jm~2#1.offset, jmb38x_ms_probe_~pci_dev_busy~0#1, jmb38x_ms_probe_~rc~5#1, jmb38x_ms_probe_~cnt~3#1, jmb38x_ms_probe_~tmp~40#1.base, jmb38x_ms_probe_~tmp~40#1.offset;jmb38x_ms_probe_~pdev#1.base, jmb38x_ms_probe_~pdev#1.offset := jmb38x_ms_probe_#in~pdev#1.base, jmb38x_ms_probe_#in~pdev#1.offset;jmb38x_ms_probe_~dev_id#1.base, jmb38x_ms_probe_~dev_id#1.offset := jmb38x_ms_probe_#in~dev_id#1.base, jmb38x_ms_probe_#in~dev_id#1.offset;havoc jmb38x_ms_probe_~jm~2#1.base, jmb38x_ms_probe_~jm~2#1.offset;havoc jmb38x_ms_probe_~pci_dev_busy~0#1;havoc jmb38x_ms_probe_~rc~5#1;havoc jmb38x_ms_probe_~cnt~3#1;havoc jmb38x_ms_probe_~tmp~40#1.base, jmb38x_ms_probe_~tmp~40#1.offset;jmb38x_ms_probe_~pci_dev_busy~0#1 := 0bv32;assume { :begin_inline_pci_set_dma_mask } true;pci_set_dma_mask_#in~dev#1.base, pci_set_dma_mask_#in~dev#1.offset, pci_set_dma_mask_#in~mask#1 := jmb38x_ms_probe_~pdev#1.base, jmb38x_ms_probe_~pdev#1.offset, 4294967295bv64;havoc pci_set_dma_mask_#res#1;havoc pci_set_dma_mask_#t~ret146#1, pci_set_dma_mask_~dev#1.base, pci_set_dma_mask_~dev#1.offset, pci_set_dma_mask_~mask#1, pci_set_dma_mask_~tmp~19#1;pci_set_dma_mask_~dev#1.base, pci_set_dma_mask_~dev#1.offset := pci_set_dma_mask_#in~dev#1.base, pci_set_dma_mask_#in~dev#1.offset;pci_set_dma_mask_~mask#1 := pci_set_dma_mask_#in~mask#1;havoc pci_set_dma_mask_~tmp~19#1;assume { :begin_inline_dma_set_mask } true;dma_set_mask_#in~arg0#1.base, dma_set_mask_#in~arg0#1.offset, dma_set_mask_#in~arg1#1 := pci_set_dma_mask_~dev#1.base, ~bvadd64(147bv64, pci_set_dma_mask_~dev#1.offset), pci_set_dma_mask_~mask#1;havoc dma_set_mask_#res#1;havoc dma_set_mask_#t~nondet677#1, dma_set_mask_~arg0#1.base, dma_set_mask_~arg0#1.offset, dma_set_mask_~arg1#1;dma_set_mask_~arg0#1.base, dma_set_mask_~arg0#1.offset := dma_set_mask_#in~arg0#1.base, dma_set_mask_#in~arg0#1.offset;dma_set_mask_~arg1#1 := dma_set_mask_#in~arg1#1;dma_set_mask_#res#1 := dma_set_mask_#t~nondet677#1;havoc dma_set_mask_#t~nondet677#1; {879#false} is VALID [2022-02-20 21:59:43,348 INFO L290 TraceCheckUtils]: 19: Hoare triple {879#false} pci_set_dma_mask_#t~ret146#1 := dma_set_mask_#res#1;assume { :end_inline_dma_set_mask } true;pci_set_dma_mask_~tmp~19#1 := pci_set_dma_mask_#t~ret146#1;havoc pci_set_dma_mask_#t~ret146#1;pci_set_dma_mask_#res#1 := pci_set_dma_mask_~tmp~19#1; {879#false} is VALID [2022-02-20 21:59:43,349 INFO L290 TraceCheckUtils]: 20: Hoare triple {879#false} jmb38x_ms_probe_#t~ret606#1 := pci_set_dma_mask_#res#1;assume { :end_inline_pci_set_dma_mask } true;jmb38x_ms_probe_~rc~5#1 := jmb38x_ms_probe_#t~ret606#1;havoc jmb38x_ms_probe_#t~ret606#1; {879#false} is VALID [2022-02-20 21:59:43,349 INFO L290 TraceCheckUtils]: 21: Hoare triple {879#false} assume !(0bv32 != jmb38x_ms_probe_~rc~5#1); {879#false} is VALID [2022-02-20 21:59:43,350 INFO L272 TraceCheckUtils]: 22: Hoare triple {879#false} call jmb38x_ms_probe_#t~ret607#1 := pci_enable_device(jmb38x_ms_probe_~pdev#1.base, jmb38x_ms_probe_~pdev#1.offset); {879#false} is VALID [2022-02-20 21:59:43,350 INFO L290 TraceCheckUtils]: 23: Hoare triple {879#false} ~arg0.base, ~arg0.offset := #in~arg0.base, #in~arg0.offset;#res := #t~nondet689;havoc #t~nondet689; {879#false} is VALID [2022-02-20 21:59:43,350 INFO L290 TraceCheckUtils]: 24: Hoare triple {879#false} assume true; {879#false} is VALID [2022-02-20 21:59:43,350 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {879#false} {879#false} #2352#return; {879#false} is VALID [2022-02-20 21:59:43,350 INFO L290 TraceCheckUtils]: 26: Hoare triple {879#false} jmb38x_ms_probe_~rc~5#1 := jmb38x_ms_probe_#t~ret607#1;havoc jmb38x_ms_probe_#t~ret607#1; {879#false} is VALID [2022-02-20 21:59:43,351 INFO L290 TraceCheckUtils]: 27: Hoare triple {879#false} assume !(0bv32 != jmb38x_ms_probe_~rc~5#1); {879#false} is VALID [2022-02-20 21:59:43,351 INFO L272 TraceCheckUtils]: 28: Hoare triple {879#false} call pci_set_master(jmb38x_ms_probe_~pdev#1.base, jmb38x_ms_probe_~pdev#1.offset); {879#false} is VALID [2022-02-20 21:59:43,351 INFO L290 TraceCheckUtils]: 29: Hoare triple {879#false} ~arg0.base, ~arg0.offset := #in~arg0.base, #in~arg0.offset; {879#false} is VALID [2022-02-20 21:59:43,351 INFO L290 TraceCheckUtils]: 30: Hoare triple {879#false} assume true; {879#false} is VALID [2022-02-20 21:59:43,351 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {879#false} {879#false} #2354#return; {879#false} is VALID [2022-02-20 21:59:43,352 INFO L290 TraceCheckUtils]: 32: Hoare triple {879#false} assume { :begin_inline_pci_request_regions } true;pci_request_regions_#in~arg0#1.base, pci_request_regions_#in~arg0#1.offset, pci_request_regions_#in~arg1#1.base, pci_request_regions_#in~arg1#1.offset := jmb38x_ms_probe_~pdev#1.base, jmb38x_ms_probe_~pdev#1.offset, 110bv64, 0bv64;havoc pci_request_regions_#res#1;havoc pci_request_regions_#t~nondet690#1, pci_request_regions_~arg0#1.base, pci_request_regions_~arg0#1.offset, pci_request_regions_~arg1#1.base, pci_request_regions_~arg1#1.offset;pci_request_regions_~arg0#1.base, pci_request_regions_~arg0#1.offset := pci_request_regions_#in~arg0#1.base, pci_request_regions_#in~arg0#1.offset;pci_request_regions_~arg1#1.base, pci_request_regions_~arg1#1.offset := pci_request_regions_#in~arg1#1.base, pci_request_regions_#in~arg1#1.offset;pci_request_regions_#res#1 := pci_request_regions_#t~nondet690#1;havoc pci_request_regions_#t~nondet690#1; {879#false} is VALID [2022-02-20 21:59:43,352 INFO L290 TraceCheckUtils]: 33: Hoare triple {879#false} jmb38x_ms_probe_#t~ret608#1 := pci_request_regions_#res#1;assume { :end_inline_pci_request_regions } true;jmb38x_ms_probe_~rc~5#1 := jmb38x_ms_probe_#t~ret608#1;havoc jmb38x_ms_probe_#t~ret608#1; {879#false} is VALID [2022-02-20 21:59:43,352 INFO L290 TraceCheckUtils]: 34: Hoare triple {879#false} assume !(0bv32 != jmb38x_ms_probe_~rc~5#1); {879#false} is VALID [2022-02-20 21:59:43,352 INFO L272 TraceCheckUtils]: 35: Hoare triple {879#false} call jmb38x_ms_probe_#t~ret609#1 := jmb38x_ms_pmos(jmb38x_ms_probe_~pdev#1.base, jmb38x_ms_probe_~pdev#1.offset, 1bv32); {879#false} is VALID [2022-02-20 21:59:43,352 INFO L290 TraceCheckUtils]: 36: Hoare triple {879#false} ~pdev.base, ~pdev.offset := #in~pdev.base, #in~pdev.offset;~flag := #in~flag;call ~#val~0.base, ~#val~0.offset := #Ultimate.allocOnStack(1bv64);call ~#descriptor~7.base, ~#descriptor~7.offset := #Ultimate.allocOnStack(37bv64);havoc ~tmp~35;call ~#descriptor___0~5.base, ~#descriptor___0~5.offset := #Ultimate.allocOnStack(37bv64);havoc ~tmp___0~18;call ~#descriptor___1~4.base, ~#descriptor___1~4.offset := #Ultimate.allocOnStack(37bv64);havoc ~tmp___1~11; {879#false} is VALID [2022-02-20 21:59:43,353 INFO L272 TraceCheckUtils]: 37: Hoare triple {879#false} call #t~ret520 := pci_read_config_byte(~pdev.base, ~pdev.offset, 174bv32, ~#val~0.base, ~#val~0.offset); {879#false} is VALID [2022-02-20 21:59:43,357 INFO L290 TraceCheckUtils]: 38: Hoare triple {879#false} ~dev#1.base, ~dev#1.offset := #in~dev#1.base, #in~dev#1.offset;~where#1 := #in~where#1;~val#1.base, ~val#1.offset := #in~val#1.base, #in~val#1.offset;havoc ~tmp~10#1;call #t~mem67#1.base, #t~mem67#1.offset := read~$Pointer$(~dev#1.base, ~bvadd64(16bv64, ~dev#1.offset), 8bv64);call #t~mem68#1 := read~intINTTYPE4(~dev#1.base, ~bvadd64(56bv64, ~dev#1.offset), 4bv64);assume { :begin_inline_pci_bus_read_config_byte } true;pci_bus_read_config_byte_#in~arg0#1.base, pci_bus_read_config_byte_#in~arg0#1.offset, pci_bus_read_config_byte_#in~arg1#1, pci_bus_read_config_byte_#in~arg2#1, pci_bus_read_config_byte_#in~arg3#1.base, pci_bus_read_config_byte_#in~arg3#1.offset := #t~mem67#1.base, #t~mem67#1.offset, #t~mem68#1, ~where#1, ~val#1.base, ~val#1.offset;havoc pci_bus_read_config_byte_#res#1;havoc pci_bus_read_config_byte_#t~nondet686#1, pci_bus_read_config_byte_~arg0#1.base, pci_bus_read_config_byte_~arg0#1.offset, pci_bus_read_config_byte_~arg1#1, pci_bus_read_config_byte_~arg2#1, pci_bus_read_config_byte_~arg3#1.base, pci_bus_read_config_byte_~arg3#1.offset;pci_bus_read_config_byte_~arg0#1.base, pci_bus_read_config_byte_~arg0#1.offset := pci_bus_read_config_byte_#in~arg0#1.base, pci_bus_read_config_byte_#in~arg0#1.offset;pci_bus_read_config_byte_~arg1#1 := pci_bus_read_config_byte_#in~arg1#1;pci_bus_read_config_byte_~arg2#1 := pci_bus_read_config_byte_#in~arg2#1;pci_bus_read_config_byte_~arg3#1.base, pci_bus_read_config_byte_~arg3#1.offset := pci_bus_read_config_byte_#in~arg3#1.base, pci_bus_read_config_byte_#in~arg3#1.offset;pci_bus_read_config_byte_#res#1 := pci_bus_read_config_byte_#t~nondet686#1;havoc pci_bus_read_config_byte_#t~nondet686#1; {879#false} is VALID [2022-02-20 21:59:43,357 INFO L290 TraceCheckUtils]: 39: Hoare triple {879#false} #t~ret69#1 := pci_bus_read_config_byte_#res#1;assume { :end_inline_pci_bus_read_config_byte } true;~tmp~10#1 := #t~ret69#1;havoc #t~mem67#1.base, #t~mem67#1.offset;havoc #t~mem68#1;havoc #t~ret69#1;#res#1 := ~tmp~10#1; {879#false} is VALID [2022-02-20 21:59:43,357 INFO L290 TraceCheckUtils]: 40: Hoare triple {879#false} assume true; {879#false} is VALID [2022-02-20 21:59:43,357 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {879#false} {879#false} #2182#return; {879#false} is VALID [2022-02-20 21:59:43,358 INFO L290 TraceCheckUtils]: 42: Hoare triple {879#false} havoc #t~ret520; {879#false} is VALID [2022-02-20 21:59:43,358 INFO L290 TraceCheckUtils]: 43: Hoare triple {879#false} assume 0bv32 != ~flag;call #t~mem521 := read~intINTTYPE1(~#val~0.base, ~#val~0.offset, 1bv64);call write~intINTTYPE1(~bvor32(71bv32, ~zero_extendFrom8To32(#t~mem521))[8:0], ~#val~0.base, ~#val~0.offset, 1bv64);havoc #t~mem521; {879#false} is VALID [2022-02-20 21:59:43,358 INFO L290 TraceCheckUtils]: 44: Hoare triple {879#false} call #t~mem523 := read~intINTTYPE1(~#val~0.base, ~#val~0.offset, 1bv64); {879#false} is VALID [2022-02-20 21:59:43,358 INFO L272 TraceCheckUtils]: 45: Hoare triple {879#false} call #t~ret524 := pci_write_config_byte(~pdev.base, ~pdev.offset, 174bv32, ~zero_extendFrom8To32(#t~mem523)[8:0]); {879#false} is VALID [2022-02-20 21:59:43,358 INFO L290 TraceCheckUtils]: 46: Hoare triple {879#false} ~dev#1.base, ~dev#1.offset := #in~dev#1.base, #in~dev#1.offset;~where#1 := #in~where#1;~val#1 := #in~val#1;havoc ~tmp~11#1;call #t~mem70#1.base, #t~mem70#1.offset := read~$Pointer$(~dev#1.base, ~bvadd64(16bv64, ~dev#1.offset), 8bv64);call #t~mem71#1 := read~intINTTYPE4(~dev#1.base, ~bvadd64(56bv64, ~dev#1.offset), 4bv64);assume { :begin_inline_pci_bus_write_config_byte } true;pci_bus_write_config_byte_#in~arg0#1.base, pci_bus_write_config_byte_#in~arg0#1.offset, pci_bus_write_config_byte_#in~arg1#1, pci_bus_write_config_byte_#in~arg2#1, pci_bus_write_config_byte_#in~arg3#1 := #t~mem70#1.base, #t~mem70#1.offset, #t~mem71#1, ~where#1, ~zero_extendFrom8To32(~val#1)[8:0];havoc pci_bus_write_config_byte_#res#1;havoc pci_bus_write_config_byte_#t~nondet687#1, pci_bus_write_config_byte_~arg0#1.base, pci_bus_write_config_byte_~arg0#1.offset, pci_bus_write_config_byte_~arg1#1, pci_bus_write_config_byte_~arg2#1, pci_bus_write_config_byte_~arg3#1;pci_bus_write_config_byte_~arg0#1.base, pci_bus_write_config_byte_~arg0#1.offset := pci_bus_write_config_byte_#in~arg0#1.base, pci_bus_write_config_byte_#in~arg0#1.offset;pci_bus_write_config_byte_~arg1#1 := pci_bus_write_config_byte_#in~arg1#1;pci_bus_write_config_byte_~arg2#1 := pci_bus_write_config_byte_#in~arg2#1;pci_bus_write_config_byte_~arg3#1 := pci_bus_write_config_byte_#in~arg3#1;pci_bus_write_config_byte_#res#1 := pci_bus_write_config_byte_#t~nondet687#1;havoc pci_bus_write_config_byte_#t~nondet687#1; {879#false} is VALID [2022-02-20 21:59:43,359 INFO L290 TraceCheckUtils]: 47: Hoare triple {879#false} #t~ret72#1 := pci_bus_write_config_byte_#res#1;assume { :end_inline_pci_bus_write_config_byte } true;~tmp~11#1 := #t~ret72#1;havoc #t~mem70#1.base, #t~mem70#1.offset;havoc #t~mem71#1;havoc #t~ret72#1;#res#1 := ~tmp~11#1; {879#false} is VALID [2022-02-20 21:59:43,361 INFO L290 TraceCheckUtils]: 48: Hoare triple {879#false} assume true; {879#false} is VALID [2022-02-20 21:59:43,362 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {879#false} {879#false} #2184#return; {879#false} is VALID [2022-02-20 21:59:43,362 INFO L290 TraceCheckUtils]: 50: Hoare triple {879#false} havoc #t~mem523;havoc #t~ret524;call write~$Pointer$(93bv64, 0bv64, ~#descriptor~7.base, ~#descriptor~7.offset, 8bv64);call write~$Pointer$(94bv64, 0bv64, ~#descriptor~7.base, ~bvadd64(8bv64, ~#descriptor~7.offset), 8bv64);call write~$Pointer$(95bv64, 0bv64, ~#descriptor~7.base, ~bvadd64(16bv64, ~#descriptor~7.offset), 8bv64);call write~$Pointer$(96bv64, 0bv64, ~#descriptor~7.base, ~bvadd64(24bv64, ~#descriptor~7.offset), 8bv64);call write~intINTTYPE4(845bv32, ~#descriptor~7.base, ~bvadd64(32bv64, ~#descriptor~7.offset), 4bv64);call write~intINTTYPE1(0bv8, ~#descriptor~7.base, ~bvadd64(36bv64, ~#descriptor~7.offset), 1bv64);call #t~mem525 := read~intINTTYPE1(~#descriptor~7.base, ~bvadd64(36bv64, ~#descriptor~7.offset), 1bv64); {879#false} is VALID [2022-02-20 21:59:43,362 INFO L272 TraceCheckUtils]: 51: Hoare triple {879#false} call #t~ret526 := ldv__builtin_expect(~bvand64(1bv64, ~zero_extendFrom8To64(#t~mem525)), 0bv64); {879#false} is VALID [2022-02-20 21:59:43,363 INFO L290 TraceCheckUtils]: 52: Hoare triple {879#false} ~exp := #in~exp;~c := #in~c;#res := ~exp; {879#false} is VALID [2022-02-20 21:59:43,364 INFO L290 TraceCheckUtils]: 53: Hoare triple {879#false} assume true; {879#false} is VALID [2022-02-20 21:59:43,364 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {879#false} {879#false} #2186#return; {879#false} is VALID [2022-02-20 21:59:43,364 INFO L290 TraceCheckUtils]: 55: Hoare triple {879#false} ~tmp~35 := #t~ret526;havoc #t~mem525;havoc #t~ret526; {879#false} is VALID [2022-02-20 21:59:43,364 INFO L290 TraceCheckUtils]: 56: Hoare triple {879#false} assume 0bv64 != ~tmp~35;havoc #t~nondet527;call #t~mem528 := read~intINTTYPE1(~#val~0.base, ~#val~0.offset, 1bv64);havoc #t~mem528; {879#false} is VALID [2022-02-20 21:59:43,364 INFO L290 TraceCheckUtils]: 57: Hoare triple {879#false} call #t~mem529 := read~intINTTYPE8(~pdev.base, ~bvadd64(1580bv64, ~pdev.offset), 8bv64); {879#false} is VALID [2022-02-20 21:59:43,365 INFO L290 TraceCheckUtils]: 58: Hoare triple {879#false} assume !(0bv64 != #t~mem529);havoc #t~mem529; {879#false} is VALID [2022-02-20 21:59:43,365 INFO L272 TraceCheckUtils]: 59: Hoare triple {879#false} call #t~ret539 := pci_read_config_byte(~pdev.base, ~pdev.offset, 185bv32, ~#val~0.base, ~#val~0.offset); {879#false} is VALID [2022-02-20 21:59:43,365 INFO L290 TraceCheckUtils]: 60: Hoare triple {879#false} ~dev#1.base, ~dev#1.offset := #in~dev#1.base, #in~dev#1.offset;~where#1 := #in~where#1;~val#1.base, ~val#1.offset := #in~val#1.base, #in~val#1.offset;havoc ~tmp~10#1;call #t~mem67#1.base, #t~mem67#1.offset := read~$Pointer$(~dev#1.base, ~bvadd64(16bv64, ~dev#1.offset), 8bv64);call #t~mem68#1 := read~intINTTYPE4(~dev#1.base, ~bvadd64(56bv64, ~dev#1.offset), 4bv64);assume { :begin_inline_pci_bus_read_config_byte } true;pci_bus_read_config_byte_#in~arg0#1.base, pci_bus_read_config_byte_#in~arg0#1.offset, pci_bus_read_config_byte_#in~arg1#1, pci_bus_read_config_byte_#in~arg2#1, pci_bus_read_config_byte_#in~arg3#1.base, pci_bus_read_config_byte_#in~arg3#1.offset := #t~mem67#1.base, #t~mem67#1.offset, #t~mem68#1, ~where#1, ~val#1.base, ~val#1.offset;havoc pci_bus_read_config_byte_#res#1;havoc pci_bus_read_config_byte_#t~nondet686#1, pci_bus_read_config_byte_~arg0#1.base, pci_bus_read_config_byte_~arg0#1.offset, pci_bus_read_config_byte_~arg1#1, pci_bus_read_config_byte_~arg2#1, pci_bus_read_config_byte_~arg3#1.base, pci_bus_read_config_byte_~arg3#1.offset;pci_bus_read_config_byte_~arg0#1.base, pci_bus_read_config_byte_~arg0#1.offset := pci_bus_read_config_byte_#in~arg0#1.base, pci_bus_read_config_byte_#in~arg0#1.offset;pci_bus_read_config_byte_~arg1#1 := pci_bus_read_config_byte_#in~arg1#1;pci_bus_read_config_byte_~arg2#1 := pci_bus_read_config_byte_#in~arg2#1;pci_bus_read_config_byte_~arg3#1.base, pci_bus_read_config_byte_~arg3#1.offset := pci_bus_read_config_byte_#in~arg3#1.base, pci_bus_read_config_byte_#in~arg3#1.offset;pci_bus_read_config_byte_#res#1 := pci_bus_read_config_byte_#t~nondet686#1;havoc pci_bus_read_config_byte_#t~nondet686#1; {879#false} is VALID [2022-02-20 21:59:43,365 INFO L290 TraceCheckUtils]: 61: Hoare triple {879#false} #t~ret69#1 := pci_bus_read_config_byte_#res#1;assume { :end_inline_pci_bus_read_config_byte } true;~tmp~10#1 := #t~ret69#1;havoc #t~mem67#1.base, #t~mem67#1.offset;havoc #t~mem68#1;havoc #t~ret69#1;#res#1 := ~tmp~10#1; {879#false} is VALID [2022-02-20 21:59:43,366 INFO L290 TraceCheckUtils]: 62: Hoare triple {879#false} assume true; {879#false} is VALID [2022-02-20 21:59:43,366 INFO L284 TraceCheckUtils]: 63: Hoare quadruple {879#false} {879#false} #2194#return; {879#false} is VALID [2022-02-20 21:59:43,366 INFO L290 TraceCheckUtils]: 64: Hoare triple {879#false} havoc #t~ret539;call #t~mem540 := read~intINTTYPE1(~#val~0.base, ~#val~0.offset, 1bv64); {879#false} is VALID [2022-02-20 21:59:43,366 INFO L272 TraceCheckUtils]: 65: Hoare triple {879#false} call #t~ret541 := pci_write_config_byte(~pdev.base, ~pdev.offset, 185bv32, ~bvand32(240bv32, ~zero_extendFrom8To32(#t~mem540))[8:0]); {879#false} is VALID [2022-02-20 21:59:43,366 INFO L290 TraceCheckUtils]: 66: Hoare triple {879#false} ~dev#1.base, ~dev#1.offset := #in~dev#1.base, #in~dev#1.offset;~where#1 := #in~where#1;~val#1 := #in~val#1;havoc ~tmp~11#1;call #t~mem70#1.base, #t~mem70#1.offset := read~$Pointer$(~dev#1.base, ~bvadd64(16bv64, ~dev#1.offset), 8bv64);call #t~mem71#1 := read~intINTTYPE4(~dev#1.base, ~bvadd64(56bv64, ~dev#1.offset), 4bv64);assume { :begin_inline_pci_bus_write_config_byte } true;pci_bus_write_config_byte_#in~arg0#1.base, pci_bus_write_config_byte_#in~arg0#1.offset, pci_bus_write_config_byte_#in~arg1#1, pci_bus_write_config_byte_#in~arg2#1, pci_bus_write_config_byte_#in~arg3#1 := #t~mem70#1.base, #t~mem70#1.offset, #t~mem71#1, ~where#1, ~zero_extendFrom8To32(~val#1)[8:0];havoc pci_bus_write_config_byte_#res#1;havoc pci_bus_write_config_byte_#t~nondet687#1, pci_bus_write_config_byte_~arg0#1.base, pci_bus_write_config_byte_~arg0#1.offset, pci_bus_write_config_byte_~arg1#1, pci_bus_write_config_byte_~arg2#1, pci_bus_write_config_byte_~arg3#1;pci_bus_write_config_byte_~arg0#1.base, pci_bus_write_config_byte_~arg0#1.offset := pci_bus_write_config_byte_#in~arg0#1.base, pci_bus_write_config_byte_#in~arg0#1.offset;pci_bus_write_config_byte_~arg1#1 := pci_bus_write_config_byte_#in~arg1#1;pci_bus_write_config_byte_~arg2#1 := pci_bus_write_config_byte_#in~arg2#1;pci_bus_write_config_byte_~arg3#1 := pci_bus_write_config_byte_#in~arg3#1;pci_bus_write_config_byte_#res#1 := pci_bus_write_config_byte_#t~nondet687#1;havoc pci_bus_write_config_byte_#t~nondet687#1; {879#false} is VALID [2022-02-20 21:59:43,368 INFO L290 TraceCheckUtils]: 67: Hoare triple {879#false} #t~ret72#1 := pci_bus_write_config_byte_#res#1;assume { :end_inline_pci_bus_write_config_byte } true;~tmp~11#1 := #t~ret72#1;havoc #t~mem70#1.base, #t~mem70#1.offset;havoc #t~mem71#1;havoc #t~ret72#1;#res#1 := ~tmp~11#1; {879#false} is VALID [2022-02-20 21:59:43,368 INFO L290 TraceCheckUtils]: 68: Hoare triple {879#false} assume true; {879#false} is VALID [2022-02-20 21:59:43,368 INFO L284 TraceCheckUtils]: 69: Hoare quadruple {879#false} {879#false} #2196#return; {879#false} is VALID [2022-02-20 21:59:43,368 INFO L290 TraceCheckUtils]: 70: Hoare triple {879#false} havoc #t~mem540;havoc #t~ret541;call #t~mem542 := read~intINTTYPE1(~#val~0.base, ~#val~0.offset, 1bv64); {879#false} is VALID [2022-02-20 21:59:43,368 INFO L272 TraceCheckUtils]: 71: Hoare triple {879#false} call #t~ret543 := pci_write_config_byte(~pdev.base, ~pdev.offset, 185bv32, ~bvor32(1bv32, ~zero_extendFrom8To32(#t~mem542))[8:0]); {879#false} is VALID [2022-02-20 21:59:43,369 INFO L290 TraceCheckUtils]: 72: Hoare triple {879#false} ~dev#1.base, ~dev#1.offset := #in~dev#1.base, #in~dev#1.offset;~where#1 := #in~where#1;~val#1 := #in~val#1;havoc ~tmp~11#1;call #t~mem70#1.base, #t~mem70#1.offset := read~$Pointer$(~dev#1.base, ~bvadd64(16bv64, ~dev#1.offset), 8bv64);call #t~mem71#1 := read~intINTTYPE4(~dev#1.base, ~bvadd64(56bv64, ~dev#1.offset), 4bv64);assume { :begin_inline_pci_bus_write_config_byte } true;pci_bus_write_config_byte_#in~arg0#1.base, pci_bus_write_config_byte_#in~arg0#1.offset, pci_bus_write_config_byte_#in~arg1#1, pci_bus_write_config_byte_#in~arg2#1, pci_bus_write_config_byte_#in~arg3#1 := #t~mem70#1.base, #t~mem70#1.offset, #t~mem71#1, ~where#1, ~zero_extendFrom8To32(~val#1)[8:0];havoc pci_bus_write_config_byte_#res#1;havoc pci_bus_write_config_byte_#t~nondet687#1, pci_bus_write_config_byte_~arg0#1.base, pci_bus_write_config_byte_~arg0#1.offset, pci_bus_write_config_byte_~arg1#1, pci_bus_write_config_byte_~arg2#1, pci_bus_write_config_byte_~arg3#1;pci_bus_write_config_byte_~arg0#1.base, pci_bus_write_config_byte_~arg0#1.offset := pci_bus_write_config_byte_#in~arg0#1.base, pci_bus_write_config_byte_#in~arg0#1.offset;pci_bus_write_config_byte_~arg1#1 := pci_bus_write_config_byte_#in~arg1#1;pci_bus_write_config_byte_~arg2#1 := pci_bus_write_config_byte_#in~arg2#1;pci_bus_write_config_byte_~arg3#1 := pci_bus_write_config_byte_#in~arg3#1;pci_bus_write_config_byte_#res#1 := pci_bus_write_config_byte_#t~nondet687#1;havoc pci_bus_write_config_byte_#t~nondet687#1; {879#false} is VALID [2022-02-20 21:59:43,369 INFO L290 TraceCheckUtils]: 73: Hoare triple {879#false} #t~ret72#1 := pci_bus_write_config_byte_#res#1;assume { :end_inline_pci_bus_write_config_byte } true;~tmp~11#1 := #t~ret72#1;havoc #t~mem70#1.base, #t~mem70#1.offset;havoc #t~mem71#1;havoc #t~ret72#1;#res#1 := ~tmp~11#1; {879#false} is VALID [2022-02-20 21:59:43,369 INFO L290 TraceCheckUtils]: 74: Hoare triple {879#false} assume true; {879#false} is VALID [2022-02-20 21:59:43,369 INFO L284 TraceCheckUtils]: 75: Hoare quadruple {879#false} {879#false} #2198#return; {879#false} is VALID [2022-02-20 21:59:43,369 INFO L290 TraceCheckUtils]: 76: Hoare triple {879#false} havoc #t~mem542;havoc #t~ret543;call write~$Pointer$(103bv64, 0bv64, ~#descriptor___1~4.base, ~#descriptor___1~4.offset, 8bv64);call write~$Pointer$(104bv64, 0bv64, ~#descriptor___1~4.base, ~bvadd64(8bv64, ~#descriptor___1~4.offset), 8bv64);call write~$Pointer$(105bv64, 0bv64, ~#descriptor___1~4.base, ~bvadd64(16bv64, ~#descriptor___1~4.offset), 8bv64);call write~$Pointer$(106bv64, 0bv64, ~#descriptor___1~4.base, ~bvadd64(24bv64, ~#descriptor___1~4.offset), 8bv64);call write~intINTTYPE4(860bv32, ~#descriptor___1~4.base, ~bvadd64(32bv64, ~#descriptor___1~4.offset), 4bv64);call write~intINTTYPE1(0bv8, ~#descriptor___1~4.base, ~bvadd64(36bv64, ~#descriptor___1~4.offset), 1bv64);call #t~mem544 := read~intINTTYPE1(~#descriptor___1~4.base, ~bvadd64(36bv64, ~#descriptor___1~4.offset), 1bv64); {879#false} is VALID [2022-02-20 21:59:43,370 INFO L272 TraceCheckUtils]: 77: Hoare triple {879#false} call #t~ret545 := ldv__builtin_expect(~bvand64(1bv64, ~zero_extendFrom8To64(#t~mem544)), 0bv64); {879#false} is VALID [2022-02-20 21:59:43,370 INFO L290 TraceCheckUtils]: 78: Hoare triple {879#false} ~exp := #in~exp;~c := #in~c;#res := ~exp; {879#false} is VALID [2022-02-20 21:59:43,370 INFO L290 TraceCheckUtils]: 79: Hoare triple {879#false} assume true; {879#false} is VALID [2022-02-20 21:59:43,370 INFO L284 TraceCheckUtils]: 80: Hoare quadruple {879#false} {879#false} #2200#return; {879#false} is VALID [2022-02-20 21:59:43,370 INFO L290 TraceCheckUtils]: 81: Hoare triple {879#false} ~tmp___1~11 := #t~ret545;havoc #t~mem544;havoc #t~ret545; {879#false} is VALID [2022-02-20 21:59:43,371 INFO L290 TraceCheckUtils]: 82: Hoare triple {879#false} assume 0bv64 != ~tmp___1~11;havoc #t~nondet546; {879#false} is VALID [2022-02-20 21:59:43,371 INFO L290 TraceCheckUtils]: 83: Hoare triple {879#false} #res := 0bv32;call ULTIMATE.dealloc(~#val~0.base, ~#val~0.offset);havoc ~#val~0.base, ~#val~0.offset;call ULTIMATE.dealloc(~#descriptor~7.base, ~#descriptor~7.offset);havoc ~#descriptor~7.base, ~#descriptor~7.offset;call ULTIMATE.dealloc(~#descriptor___0~5.base, ~#descriptor___0~5.offset);havoc ~#descriptor___0~5.base, ~#descriptor___0~5.offset;call ULTIMATE.dealloc(~#descriptor___1~4.base, ~#descriptor___1~4.offset);havoc ~#descriptor___1~4.base, ~#descriptor___1~4.offset; {879#false} is VALID [2022-02-20 21:59:43,371 INFO L290 TraceCheckUtils]: 84: Hoare triple {879#false} assume true; {879#false} is VALID [2022-02-20 21:59:43,371 INFO L284 TraceCheckUtils]: 85: Hoare quadruple {879#false} {879#false} #2356#return; {879#false} is VALID [2022-02-20 21:59:43,371 INFO L290 TraceCheckUtils]: 86: Hoare triple {879#false} havoc jmb38x_ms_probe_#t~ret609#1;assume { :begin_inline_jmb38x_ms_count_slots } true;jmb38x_ms_count_slots_#in~pdev#1.base, jmb38x_ms_count_slots_#in~pdev#1.offset := jmb38x_ms_probe_~pdev#1.base, jmb38x_ms_probe_~pdev#1.offset;havoc jmb38x_ms_count_slots_#res#1;havoc jmb38x_ms_count_slots_#t~mem566#1, jmb38x_ms_count_slots_#t~mem567#1, jmb38x_ms_count_slots_#t~mem568#1, jmb38x_ms_count_slots_#t~mem569#1, jmb38x_ms_count_slots_#t~short570#1, jmb38x_ms_count_slots_#t~mem571#1, jmb38x_ms_count_slots_#t~mem572#1, jmb38x_ms_count_slots_#t~short573#1, jmb38x_ms_count_slots_~pdev#1.base, jmb38x_ms_count_slots_~pdev#1.offset, jmb38x_ms_count_slots_~cnt~2#1, jmb38x_ms_count_slots_~rc~4#1;jmb38x_ms_count_slots_~pdev#1.base, jmb38x_ms_count_slots_~pdev#1.offset := jmb38x_ms_count_slots_#in~pdev#1.base, jmb38x_ms_count_slots_#in~pdev#1.offset;havoc jmb38x_ms_count_slots_~cnt~2#1;havoc jmb38x_ms_count_slots_~rc~4#1;jmb38x_ms_count_slots_~rc~4#1 := 0bv32;jmb38x_ms_count_slots_~cnt~2#1 := 0bv32; {879#false} is VALID [2022-02-20 21:59:43,372 INFO L290 TraceCheckUtils]: 87: Hoare triple {879#false} assume !~bvsle32(jmb38x_ms_count_slots_~cnt~2#1, 5bv32); {879#false} is VALID [2022-02-20 21:59:43,372 INFO L290 TraceCheckUtils]: 88: Hoare triple {879#false} jmb38x_ms_count_slots_#res#1 := jmb38x_ms_count_slots_~rc~4#1; {879#false} is VALID [2022-02-20 21:59:43,372 INFO L290 TraceCheckUtils]: 89: Hoare triple {879#false} jmb38x_ms_probe_#t~ret610#1 := jmb38x_ms_count_slots_#res#1;assume { :end_inline_jmb38x_ms_count_slots } true;jmb38x_ms_probe_~cnt~3#1 := jmb38x_ms_probe_#t~ret610#1;havoc jmb38x_ms_probe_#t~ret610#1; {879#false} is VALID [2022-02-20 21:59:43,373 INFO L290 TraceCheckUtils]: 90: Hoare triple {879#false} assume !(0bv32 == jmb38x_ms_probe_~cnt~3#1);assume { :begin_inline_kzalloc } true;kzalloc_#in~size#1, kzalloc_#in~flags#1 := ~bvmul64(8bv64, ~bvadd64(2bv64, ~sign_extendFrom32To64(jmb38x_ms_probe_~cnt~3#1))), 208bv32;havoc kzalloc_#res#1.base, kzalloc_#res#1.offset;havoc kzalloc_~size#1, kzalloc_~flags#1;kzalloc_~size#1 := kzalloc_#in~size#1;kzalloc_~flags#1 := kzalloc_#in~flags#1;assume { :begin_inline_ldv_check_alloc_flags } true;ldv_check_alloc_flags_#in~flags#1 := kzalloc_~flags#1;havoc ldv_check_alloc_flags_~flags#1;ldv_check_alloc_flags_~flags#1 := ldv_check_alloc_flags_#in~flags#1; {879#false} is VALID [2022-02-20 21:59:43,375 INFO L290 TraceCheckUtils]: 91: Hoare triple {879#false} assume !(0bv32 == ~ldv_spin~0 || 0bv32 == ~bvand32(16bv32, ldv_check_alloc_flags_~flags#1)); {879#false} is VALID [2022-02-20 21:59:43,375 INFO L272 TraceCheckUtils]: 92: Hoare triple {879#false} call ldv_error(); {879#false} is VALID [2022-02-20 21:59:43,375 INFO L290 TraceCheckUtils]: 93: Hoare triple {879#false} assume !false; {879#false} is VALID [2022-02-20 21:59:43,376 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2022-02-20 21:59:43,376 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 21:59:43,377 INFO L144 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-02-20 21:59:43,377 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [112826465] [2022-02-20 21:59:43,378 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleMathsat [112826465] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 21:59:43,378 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 21:59:43,379 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 21:59:43,381 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [454069776] [2022-02-20 21:59:43,381 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 21:59:43,385 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 20.0) internal successors, (60), 3 states have internal predecessors, (60), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 94 [2022-02-20 21:59:43,387 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 21:59:43,389 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 20.0) internal successors, (60), 3 states have internal predecessors, (60), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 21:59:43,539 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 83 edges. 83 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 21:59:43,539 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 21:59:43,539 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-02-20 21:59:43,555 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 21:59:43,556 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 21:59:43,562 INFO L87 Difference]: Start difference. First operand has 875 states, 662 states have (on average 1.3700906344410877) internal successors, (907), 685 states have internal predecessors, (907), 170 states have call successors, (170), 42 states have call predecessors, (170), 41 states have return successors, (164), 160 states have call predecessors, (164), 164 states have call successors, (164) Second operand has 3 states, 3 states have (on average 20.0) internal successors, (60), 3 states have internal predecessors, (60), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 22:00:07,786 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 22:00:07,787 INFO L93 Difference]: Finished difference Result 1746 states and 2501 transitions. [2022-02-20 22:00:07,787 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 22:00:07,789 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 20.0) internal successors, (60), 3 states have internal predecessors, (60), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 94 [2022-02-20 22:00:07,789 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 22:00:07,792 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 20.0) internal successors, (60), 3 states have internal predecessors, (60), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 22:00:07,859 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 2501 transitions. [2022-02-20 22:00:07,859 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 20.0) internal successors, (60), 3 states have internal predecessors, (60), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 22:00:07,909 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 2501 transitions. [2022-02-20 22:00:07,910 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 2501 transitions. [2022-02-20 22:00:11,864 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 2501 edges. 2501 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 22:00:12,006 INFO L225 Difference]: With dead ends: 1746 [2022-02-20 22:00:12,007 INFO L226 Difference]: Without dead ends: 853 [2022-02-20 22:00:12,016 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 93 GetRequests, 92 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 22:00:12,022 INFO L933 BasicCegarLoop]: 1236 mSDtfsCounter, 0 mSDsluCounter, 1234 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 2470 SdHoareTripleChecker+Invalid, 3 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 22:00:12,023 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 2470 Invalid, 3 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [0 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 22:00:12,039 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 853 states. [2022-02-20 22:00:12,106 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 853 to 853. [2022-02-20 22:00:12,106 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 22:00:12,120 INFO L82 GeneralOperation]: Start isEquivalent. First operand 853 states. Second operand has 853 states, 648 states have (on average 1.3518518518518519) internal successors, (876), 663 states have internal predecessors, (876), 164 states have call successors, (164), 41 states have call predecessors, (164), 40 states have return successors, (163), 159 states have call predecessors, (163), 163 states have call successors, (163) [2022-02-20 22:00:12,122 INFO L74 IsIncluded]: Start isIncluded. First operand 853 states. Second operand has 853 states, 648 states have (on average 1.3518518518518519) internal successors, (876), 663 states have internal predecessors, (876), 164 states have call successors, (164), 41 states have call predecessors, (164), 40 states have return successors, (163), 159 states have call predecessors, (163), 163 states have call successors, (163) [2022-02-20 22:00:12,125 INFO L87 Difference]: Start difference. First operand 853 states. Second operand has 853 states, 648 states have (on average 1.3518518518518519) internal successors, (876), 663 states have internal predecessors, (876), 164 states have call successors, (164), 41 states have call predecessors, (164), 40 states have return successors, (163), 159 states have call predecessors, (163), 163 states have call successors, (163) [2022-02-20 22:00:12,168 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 22:00:12,168 INFO L93 Difference]: Finished difference Result 853 states and 1203 transitions. [2022-02-20 22:00:12,169 INFO L276 IsEmpty]: Start isEmpty. Operand 853 states and 1203 transitions. [2022-02-20 22:00:12,176 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 22:00:12,176 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 22:00:12,179 INFO L74 IsIncluded]: Start isIncluded. First operand has 853 states, 648 states have (on average 1.3518518518518519) internal successors, (876), 663 states have internal predecessors, (876), 164 states have call successors, (164), 41 states have call predecessors, (164), 40 states have return successors, (163), 159 states have call predecessors, (163), 163 states have call successors, (163) Second operand 853 states. [2022-02-20 22:00:12,181 INFO L87 Difference]: Start difference. First operand has 853 states, 648 states have (on average 1.3518518518518519) internal successors, (876), 663 states have internal predecessors, (876), 164 states have call successors, (164), 41 states have call predecessors, (164), 40 states have return successors, (163), 159 states have call predecessors, (163), 163 states have call successors, (163) Second operand 853 states. [2022-02-20 22:00:12,221 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 22:00:12,222 INFO L93 Difference]: Finished difference Result 853 states and 1203 transitions. [2022-02-20 22:00:12,222 INFO L276 IsEmpty]: Start isEmpty. Operand 853 states and 1203 transitions. [2022-02-20 22:00:12,225 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 22:00:12,225 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 22:00:12,225 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 22:00:12,225 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 22:00:12,227 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 853 states, 648 states have (on average 1.3518518518518519) internal successors, (876), 663 states have internal predecessors, (876), 164 states have call successors, (164), 41 states have call predecessors, (164), 40 states have return successors, (163), 159 states have call predecessors, (163), 163 states have call successors, (163) [2022-02-20 22:00:12,273 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 853 states to 853 states and 1203 transitions. [2022-02-20 22:00:12,275 INFO L78 Accepts]: Start accepts. Automaton has 853 states and 1203 transitions. Word has length 94 [2022-02-20 22:00:12,275 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 22:00:12,275 INFO L470 AbstractCegarLoop]: Abstraction has 853 states and 1203 transitions. [2022-02-20 22:00:12,276 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 20.0) internal successors, (60), 3 states have internal predecessors, (60), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 22:00:12,276 INFO L276 IsEmpty]: Start isEmpty. Operand 853 states and 1203 transitions. [2022-02-20 22:00:12,280 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 96 [2022-02-20 22:00:12,280 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 22:00:12,280 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 22:00:12,315 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Ended with exit code 0 [2022-02-20 22:00:12,500 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-02-20 22:00:12,500 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 22:00:12,501 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 22:00:12,501 INFO L85 PathProgramCache]: Analyzing trace with hash 508870238, now seen corresponding path program 1 times [2022-02-20 22:00:12,502 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 22:00:12,502 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [623796399] [2022-02-20 22:00:12,502 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 22:00:12,502 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 22:00:12,502 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 22:00:12,507 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 22:00:12,508 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2022-02-20 22:00:13,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 22:00:13,106 INFO L263 TraceCheckSpWp]: Trace formula consists of 1016 conjuncts, 4 conjunts are in the unsatisfiable core [2022-02-20 22:00:13,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 22:00:13,149 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 22:00:13,464 INFO L290 TraceCheckUtils]: 0: Hoare triple {6523#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv64, 0bv64;assume 0bv1 == #valid[0bv64];assume ~bvult64(0bv64, #StackHeapBarrier);call #Ultimate.allocInit(2bv64, 1bv64);call write~init~intINTTYPE1(48bv8, 1bv64, 0bv64, 1bv64);call write~init~intINTTYPE1(0bv8, 1bv64, 1bv64, 1bv64);call #Ultimate.allocInit(106bv64, 2bv64);call #Ultimate.allocInit(10bv64, 3bv64);call #Ultimate.allocInit(20bv64, 4bv64);call #Ultimate.allocInit(224bv64, 5bv64);call #Ultimate.allocInit(17bv64, 6bv64);call #Ultimate.allocInit(17bv64, 7bv64);call #Ultimate.allocInit(10bv64, 8bv64);call #Ultimate.allocInit(20bv64, 9bv64);call #Ultimate.allocInit(224bv64, 10bv64);call #Ultimate.allocInit(14bv64, 11bv64);call #Ultimate.allocInit(14bv64, 12bv64);call #Ultimate.allocInit(10bv64, 13bv64);call #Ultimate.allocInit(20bv64, 14bv64);call #Ultimate.allocInit(224bv64, 15bv64);call #Ultimate.allocInit(13bv64, 16bv64);call #Ultimate.allocInit(13bv64, 17bv64);call #Ultimate.allocInit(10bv64, 18bv64);call #Ultimate.allocInit(20bv64, 19bv64);call #Ultimate.allocInit(224bv64, 20bv64);call #Ultimate.allocInit(14bv64, 21bv64);call #Ultimate.allocInit(14bv64, 22bv64);call #Ultimate.allocInit(10bv64, 23bv64);call #Ultimate.allocInit(20bv64, 24bv64);call #Ultimate.allocInit(224bv64, 25bv64);call #Ultimate.allocInit(28bv64, 26bv64);call #Ultimate.allocInit(28bv64, 27bv64);call #Ultimate.allocInit(10bv64, 28bv64);call #Ultimate.allocInit(23bv64, 29bv64);call #Ultimate.allocInit(224bv64, 30bv64);call #Ultimate.allocInit(16bv64, 31bv64);call #Ultimate.allocInit(16bv64, 32bv64);call #Ultimate.allocInit(10bv64, 33bv64);call #Ultimate.allocInit(23bv64, 34bv64);call #Ultimate.allocInit(224bv64, 35bv64);call #Ultimate.allocInit(15bv64, 36bv64);call #Ultimate.allocInit(15bv64, 37bv64);call #Ultimate.allocInit(10bv64, 38bv64);call #Ultimate.allocInit(23bv64, 39bv64);call #Ultimate.allocInit(224bv64, 40bv64);call #Ultimate.allocInit(16bv64, 41bv64);call #Ultimate.allocInit(16bv64, 42bv64);call #Ultimate.allocInit(10bv64, 43bv64);call #Ultimate.allocInit(14bv64, 44bv64);call #Ultimate.allocInit(224bv64, 45bv64);call #Ultimate.allocInit(19bv64, 46bv64);call #Ultimate.allocInit(19bv64, 47bv64);call #Ultimate.allocInit(10bv64, 48bv64);call #Ultimate.allocInit(14bv64, 49bv64);call #Ultimate.allocInit(224bv64, 50bv64);call #Ultimate.allocInit(9bv64, 51bv64);call #Ultimate.allocInit(9bv64, 52bv64);call #Ultimate.allocInit(10bv64, 53bv64);call #Ultimate.allocInit(14bv64, 54bv64);call #Ultimate.allocInit(224bv64, 55bv64);call #Ultimate.allocInit(15bv64, 56bv64);call #Ultimate.allocInit(15bv64, 57bv64);call #Ultimate.allocInit(10bv64, 58bv64);call #Ultimate.allocInit(16bv64, 59bv64);call #Ultimate.allocInit(224bv64, 60bv64);call #Ultimate.allocInit(7bv64, 61bv64);call write~init~intINTTYPE1(97bv8, 61bv64, 0bv64, 1bv64);call write~init~intINTTYPE1(98bv8, 61bv64, 1bv64, 1bv64);call write~init~intINTTYPE1(111bv8, 61bv64, 2bv64, 1bv64);call write~init~intINTTYPE1(114bv8, 61bv64, 3bv64, 1bv64);call write~init~intINTTYPE1(116bv8, 61bv64, 4bv64, 1bv64);call write~init~intINTTYPE1(10bv8, 61bv64, 5bv64, 1bv64);call write~init~intINTTYPE1(0bv8, 61bv64, 6bv64, 1bv64);call #Ultimate.allocInit(7bv64, 62bv64);call write~init~intINTTYPE1(97bv8, 62bv64, 0bv64, 1bv64);call write~init~intINTTYPE1(98bv8, 62bv64, 1bv64, 1bv64);call write~init~intINTTYPE1(111bv8, 62bv64, 2bv64, 1bv64);call write~init~intINTTYPE1(114bv8, 62bv64, 3bv64, 1bv64);call write~init~intINTTYPE1(116bv8, 62bv64, 4bv64, 1bv64);call write~init~intINTTYPE1(10bv8, 62bv64, 5bv64, 1bv64);call write~init~intINTTYPE1(0bv8, 62bv64, 6bv64, 1bv64);call #Ultimate.allocInit(10bv64, 63bv64);call #Ultimate.allocInit(22bv64, 64bv64);call #Ultimate.allocInit(224bv64, 65bv64);call #Ultimate.allocInit(16bv64, 66bv64);call #Ultimate.allocInit(16bv64, 67bv64);call #Ultimate.allocInit(10bv64, 68bv64);call #Ultimate.allocInit(16bv64, 69bv64);call #Ultimate.allocInit(224bv64, 70bv64);call #Ultimate.allocInit(19bv64, 71bv64);call #Ultimate.allocInit(19bv64, 72bv64);call #Ultimate.allocInit(10bv64, 73bv64);call #Ultimate.allocInit(16bv64, 74bv64);call #Ultimate.allocInit(224bv64, 75bv64);call #Ultimate.allocInit(15bv64, 76bv64);call #Ultimate.allocInit(15bv64, 77bv64);call #Ultimate.allocInit(10bv64, 78bv64);call #Ultimate.allocInit(20bv64, 79bv64);call #Ultimate.allocInit(224bv64, 80bv64);call #Ultimate.allocInit(10bv64, 81bv64);call #Ultimate.allocInit(10bv64, 82bv64);call #Ultimate.allocInit(10bv64, 83bv64);call #Ultimate.allocInit(20bv64, 84bv64);call #Ultimate.allocInit(224bv64, 85bv64);call #Ultimate.allocInit(11bv64, 86bv64);call #Ultimate.allocInit(11bv64, 87bv64);call #Ultimate.allocInit(10bv64, 88bv64);call #Ultimate.allocInit(20bv64, 89bv64);call #Ultimate.allocInit(224bv64, 90bv64);call #Ultimate.allocInit(31bv64, 91bv64);call #Ultimate.allocInit(31bv64, 92bv64);call #Ultimate.allocInit(10bv64, 93bv64);call #Ultimate.allocInit(15bv64, 94bv64);call #Ultimate.allocInit(224bv64, 95bv64);call #Ultimate.allocInit(28bv64, 96bv64);call #Ultimate.allocInit(28bv64, 97bv64);call #Ultimate.allocInit(10bv64, 98bv64);call #Ultimate.allocInit(15bv64, 99bv64);call #Ultimate.allocInit(224bv64, 100bv64);call #Ultimate.allocInit(28bv64, 101bv64);call #Ultimate.allocInit(28bv64, 102bv64);call #Ultimate.allocInit(10bv64, 103bv64);call #Ultimate.allocInit(15bv64, 104bv64);call #Ultimate.allocInit(224bv64, 105bv64);call #Ultimate.allocInit(42bv64, 106bv64);call #Ultimate.allocInit(42bv64, 107bv64);call #Ultimate.allocInit(22bv64, 108bv64);call #Ultimate.allocInit(17bv64, 109bv64);call #Ultimate.allocInit(10bv64, 110bv64);call #Ultimate.allocInit(10bv64, 111bv64);call #Ultimate.allocInit(17bv64, 112bv64);call #Ultimate.allocInit(224bv64, 113bv64);call #Ultimate.allocInit(16bv64, 114bv64);call #Ultimate.allocInit(16bv64, 115bv64);call #Ultimate.allocInit(10bv64, 116bv64);call #Ultimate.allocInit(17bv64, 117bv64);call #Ultimate.allocInit(224bv64, 118bv64);call #Ultimate.allocInit(14bv64, 119bv64);call #Ultimate.allocInit(14bv64, 120bv64);call #Ultimate.allocInit(10bv64, 121bv64);call #Ultimate.allocInit(10bv64, 122bv64);~ldv_irq_1_3~0 := 0bv32;~ldv_irq_data_1_1~0.base, ~ldv_irq_data_1_1~0.offset := 0bv64, 0bv64;~ldv_irq_1_0~0 := 0bv32;~ldv_timer_list_2_0~0.base, ~ldv_timer_list_2_0~0.offset := 0bv64, 0bv64;~ldv_timer_list_2_1~0.base, ~ldv_timer_list_2_1~0.offset := 0bv64, 0bv64;~ldv_timer_2_1~0 := 0bv32;~ldv_irq_data_1_0~0.base, ~ldv_irq_data_1_0~0.offset := 0bv64, 0bv64;~ldv_state_variable_0~0 := 0bv32;~ldv_timer_2_0~0 := 0bv32;~ldv_state_variable_2~0 := 0bv32;~ldv_irq_data_1_3~0.base, ~ldv_irq_data_1_3~0.offset := 0bv64, 0bv64;~ldv_irq_data_1_2~0.base, ~ldv_irq_data_1_2~0.offset := 0bv64, 0bv64;~jmb38x_ms_driver_group0~0.base, ~jmb38x_ms_driver_group0~0.offset := 0bv64, 0bv64;~ldv_timer_2_2~0 := 0bv32;~ldv_irq_1_2~0 := 0bv32;~ldv_timer_2_3~0 := 0bv32;~LDV_IN_INTERRUPT~0 := 1bv32;~ldv_irq_1_1~0 := 0bv32;~ldv_irq_line_1_3~0 := 0bv32;~ldv_state_variable_3~0 := 0bv32;~ldv_irq_line_1_0~0 := 0bv32;~ref_cnt~0 := 0bv32;~ldv_timer_list_2_3~0.base, ~ldv_timer_list_2_3~0.offset := 0bv64, 0bv64;~ldv_irq_line_1_1~0 := 0bv32;~ldv_state_variable_1~0 := 0bv32;~ldv_timer_list_2_2~0.base, ~ldv_timer_list_2_2~0.offset := 0bv64, 0bv64;~ldv_irq_line_1_2~0 := 0bv32;~no_dma~0 := 0bv8;~#jmb38x_ms_id_tbl~0.base, ~#jmb38x_ms_id_tbl~0.offset := 123bv64, 0bv64;call #Ultimate.allocInit(128bv64, 123bv64);call write~init~intINTTYPE4(6523bv32, ~#jmb38x_ms_id_tbl~0.base, ~#jmb38x_ms_id_tbl~0.offset, 4bv64);call write~init~intINTTYPE4(9091bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(4bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(4294967295bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(8bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(4294967295bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(12bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(16bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(20bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE8(0bv64, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(24bv64, ~#jmb38x_ms_id_tbl~0.offset), 8bv64);call write~init~intINTTYPE4(6523bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(32bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(9096bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(36bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(4294967295bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(40bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(4294967295bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(44bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(48bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(52bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE8(0bv64, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(56bv64, ~#jmb38x_ms_id_tbl~0.offset), 8bv64);call write~init~intINTTYPE4(6523bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(64bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(9107bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(68bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(4294967295bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(72bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(4294967295bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(76bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(80bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(84bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE8(0bv64, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(88bv64, ~#jmb38x_ms_id_tbl~0.offset), 8bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(96bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(100bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(104bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(108bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(112bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(116bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE8(0bv64, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(120bv64, ~#jmb38x_ms_id_tbl~0.offset), 8bv64);~#jmb38x_ms_driver~0.base, ~#jmb38x_ms_driver~0.offset := 124bv64, 0bv64;call #Ultimate.allocInit(301bv64, 124bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~#jmb38x_ms_driver~0.offset, 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(8bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(121bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(16bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(~#jmb38x_ms_id_tbl~0.base, ~#jmb38x_ms_id_tbl~0.offset, ~#jmb38x_ms_driver~0.base, ~bvadd64(24bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(#funAddr~jmb38x_ms_probe.base, #funAddr~jmb38x_ms_probe.offset, ~#jmb38x_ms_driver~0.base, ~bvadd64(32bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(#funAddr~jmb38x_ms_remove.base, #funAddr~jmb38x_ms_remove.offset, ~#jmb38x_ms_driver~0.base, ~bvadd64(40bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(#funAddr~jmb38x_ms_suspend.base, #funAddr~jmb38x_ms_suspend.offset, ~#jmb38x_ms_driver~0.base, ~bvadd64(48bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(56bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(64bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(#funAddr~jmb38x_ms_resume.base, #funAddr~jmb38x_ms_resume.offset, ~#jmb38x_ms_driver~0.base, ~bvadd64(72bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(80bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(88bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(96bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(104bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(112bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(120bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(128bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~intINTTYPE1(0bv8, ~#jmb38x_ms_driver~0.base, ~bvadd64(136bv64, ~#jmb38x_ms_driver~0.offset), 1bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(137bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(145bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(153bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(161bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(169bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(177bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(185bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(193bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(201bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(209bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_driver~0.base, ~bvadd64(217bv64, ~#jmb38x_ms_driver~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_driver~0.base, ~bvadd64(221bv64, ~#jmb38x_ms_driver~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_driver~0.base, ~bvadd64(225bv64, ~#jmb38x_ms_driver~0.offset), 4bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(229bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(237bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(245bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(253bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(261bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_driver~0.base, ~bvadd64(269bv64, ~#jmb38x_ms_driver~0.offset), 4bv64);call write~init~intINTTYPE8(0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(273bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(285bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(293bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);~__mod_pci__jmb38x_ms_id_tbl_device_table~0.vendor := 0bv32;~__mod_pci__jmb38x_ms_id_tbl_device_table~0.device := 0bv32;~__mod_pci__jmb38x_ms_id_tbl_device_table~0.subvendor := 0bv32;~__mod_pci__jmb38x_ms_id_tbl_device_table~0.subdevice := 0bv32;~__mod_pci__jmb38x_ms_id_tbl_device_table~0.class := 0bv32;~__mod_pci__jmb38x_ms_id_tbl_device_table~0.class_mask := 0bv32;~__mod_pci__jmb38x_ms_id_tbl_device_table~0.driver_data := 0bv64;~ldv_retval_0~0 := 0bv32;~ldv_retval_1~0 := 0bv32;~ldv_retval_3~0 := 0bv32;~ldv_retval_2~0 := 0bv32;~ldv_spin~0 := 0bv32; {6523#true} is VALID [2022-02-20 22:00:13,464 INFO L290 TraceCheckUtils]: 1: Hoare triple {6523#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret654#1.base, main_#t~ret654#1.offset, main_#t~memset~res655#1.base, main_#t~memset~res655#1.offset, main_#t~nondet656#1, main_#t~switch657#1, main_#t~nondet658#1, main_#t~switch659#1, main_#t~ret660#1, main_#t~nondet661#1, main_#t~switch662#1, main_#t~ret663#1, main_#t~mem664#1, main_#t~ret665#1, main_#t~ret666#1, main_~ldvarg1~0#1.base, main_~ldvarg1~0#1.offset, main_~tmp~47#1.base, main_~tmp~47#1.offset, main_~#ldvarg0~0#1.base, main_~#ldvarg0~0#1.offset, main_~tmp___0~22#1, main_~tmp___1~14#1, main_~tmp___2~9#1;havoc main_~ldvarg1~0#1.base, main_~ldvarg1~0#1.offset;havoc main_~tmp~47#1.base, main_~tmp~47#1.offset;call main_~#ldvarg0~0#1.base, main_~#ldvarg0~0#1.offset := #Ultimate.allocOnStack(4bv64);havoc main_~tmp___0~22#1;havoc main_~tmp___1~14#1;havoc main_~tmp___2~9#1; {6523#true} is VALID [2022-02-20 22:00:13,464 INFO L272 TraceCheckUtils]: 2: Hoare triple {6523#true} call main_#t~ret654#1.base, main_#t~ret654#1.offset := ldv_zalloc(32bv64); {6523#true} is VALID [2022-02-20 22:00:13,467 INFO L290 TraceCheckUtils]: 3: Hoare triple {6523#true} ~size#1 := #in~size#1;havoc ~p~1#1.base, ~p~1#1.offset;havoc ~tmp~5#1.base, ~tmp~5#1.offset;havoc ~tmp___0~1#1;~tmp___0~1#1 := #t~nondet39#1;havoc #t~nondet39#1; {6523#true} is VALID [2022-02-20 22:00:13,467 INFO L290 TraceCheckUtils]: 4: Hoare triple {6523#true} assume 0bv32 != ~tmp___0~1#1;#res#1.base, #res#1.offset := 0bv64, 0bv64; {6523#true} is VALID [2022-02-20 22:00:13,467 INFO L290 TraceCheckUtils]: 5: Hoare triple {6523#true} assume true; {6523#true} is VALID [2022-02-20 22:00:13,467 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {6523#true} {6523#true} #2336#return; {6523#true} is VALID [2022-02-20 22:00:13,467 INFO L290 TraceCheckUtils]: 7: Hoare triple {6523#true} main_~tmp~47#1.base, main_~tmp~47#1.offset := main_#t~ret654#1.base, main_#t~ret654#1.offset;havoc main_#t~ret654#1.base, main_#t~ret654#1.offset;main_~ldvarg1~0#1.base, main_~ldvarg1~0#1.offset := main_~tmp~47#1.base, main_~tmp~47#1.offset;assume { :begin_inline_ldv_initialize } true; {6523#true} is VALID [2022-02-20 22:00:13,468 INFO L290 TraceCheckUtils]: 8: Hoare triple {6523#true} assume { :end_inline_ldv_initialize } true;assume { :begin_inline_#Ultimate.C_memset } true;#Ultimate.C_memset_#ptr#1.base, #Ultimate.C_memset_#ptr#1.offset, #Ultimate.C_memset_#value#1, #Ultimate.C_memset_#amount#1 := main_~#ldvarg0~0#1.base, main_~#ldvarg0~0#1.offset, 0bv32, 4bv64;havoc #Ultimate.C_memset_#res#1.base, #Ultimate.C_memset_#res#1.offset;havoc #Ultimate.C_memset_#t~loopctr697#1;#Ultimate.C_memset_#t~loopctr697#1 := 0bv64; {6552#(and (= |ULTIMATE.start_#Ultimate.C_memset_#amount#1| (_ bv4 64)) (= (_ bv0 64) |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr697#1|))} is VALID [2022-02-20 22:00:13,469 INFO L290 TraceCheckUtils]: 9: Hoare triple {6552#(and (= |ULTIMATE.start_#Ultimate.C_memset_#amount#1| (_ bv4 64)) (= (_ bv0 64) |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr697#1|))} assume ~bvult64(#Ultimate.C_memset_#t~loopctr697#1, #Ultimate.C_memset_#amount#1);#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#Ultimate.C_memset_#ptr#1.base,~bvadd64(#Ultimate.C_memset_#ptr#1.offset, #Ultimate.C_memset_#t~loopctr697#1) := 0bv64], #memory_$Pointer$.offset[#Ultimate.C_memset_#ptr#1.base,~bvadd64(#Ultimate.C_memset_#ptr#1.offset, #Ultimate.C_memset_#t~loopctr697#1) := ~zero_extendFrom8To64(#Ultimate.C_memset_#value#1[8:0])];#memory_int := #memory_int[#Ultimate.C_memset_#ptr#1.base,~bvadd64(#Ultimate.C_memset_#ptr#1.offset, #Ultimate.C_memset_#t~loopctr697#1) := #Ultimate.C_memset_#value#1[8:0]];#Ultimate.C_memset_#t~loopctr697#1 := ~bvadd64(1bv64, #Ultimate.C_memset_#t~loopctr697#1); {6556#(and (= |ULTIMATE.start_#Ultimate.C_memset_#amount#1| (_ bv4 64)) (= |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr697#1| (_ bv1 64)))} is VALID [2022-02-20 22:00:13,469 INFO L290 TraceCheckUtils]: 10: Hoare triple {6556#(and (= |ULTIMATE.start_#Ultimate.C_memset_#amount#1| (_ bv4 64)) (= |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr697#1| (_ bv1 64)))} assume !~bvult64(#Ultimate.C_memset_#t~loopctr697#1, #Ultimate.C_memset_#amount#1); {6524#false} is VALID [2022-02-20 22:00:13,469 INFO L290 TraceCheckUtils]: 11: Hoare triple {6524#false} assume #Ultimate.C_memset_#res#1.base == #Ultimate.C_memset_#ptr#1.base && #Ultimate.C_memset_#res#1.offset == #Ultimate.C_memset_#ptr#1.offset;main_#t~memset~res655#1.base, main_#t~memset~res655#1.offset := #Ultimate.C_memset_#res#1.base, #Ultimate.C_memset_#res#1.offset;assume { :end_inline_#Ultimate.C_memset } true;havoc main_#t~memset~res655#1.base, main_#t~memset~res655#1.offset;~ldv_state_variable_1~0 := 1bv32;~ref_cnt~0 := 0bv32;~ldv_state_variable_0~0 := 1bv32;~ldv_state_variable_3~0 := 0bv32;assume { :begin_inline_timer_init_2 } true;~ldv_timer_2_0~0 := 0bv32;~ldv_timer_2_1~0 := 0bv32;~ldv_timer_2_2~0 := 0bv32;~ldv_timer_2_3~0 := 0bv32; {6524#false} is VALID [2022-02-20 22:00:13,469 INFO L290 TraceCheckUtils]: 12: Hoare triple {6524#false} assume { :end_inline_timer_init_2 } true;~ldv_state_variable_2~0 := 1bv32; {6524#false} is VALID [2022-02-20 22:00:13,470 INFO L290 TraceCheckUtils]: 13: Hoare triple {6524#false} main_~tmp___0~22#1 := main_#t~nondet656#1;havoc main_#t~nondet656#1;main_#t~switch657#1 := 0bv32 == main_~tmp___0~22#1; {6524#false} is VALID [2022-02-20 22:00:13,470 INFO L290 TraceCheckUtils]: 14: Hoare triple {6524#false} assume !main_#t~switch657#1;main_#t~switch657#1 := main_#t~switch657#1 || 1bv32 == main_~tmp___0~22#1; {6524#false} is VALID [2022-02-20 22:00:13,470 INFO L290 TraceCheckUtils]: 15: Hoare triple {6524#false} assume !main_#t~switch657#1;main_#t~switch657#1 := main_#t~switch657#1 || 2bv32 == main_~tmp___0~22#1; {6524#false} is VALID [2022-02-20 22:00:13,471 INFO L290 TraceCheckUtils]: 16: Hoare triple {6524#false} assume main_#t~switch657#1; {6524#false} is VALID [2022-02-20 22:00:13,471 INFO L290 TraceCheckUtils]: 17: Hoare triple {6524#false} assume 0bv32 != ~ldv_state_variable_3~0;main_~tmp___2~9#1 := main_#t~nondet661#1;havoc main_#t~nondet661#1;main_#t~switch662#1 := 0bv32 == main_~tmp___2~9#1; {6524#false} is VALID [2022-02-20 22:00:13,472 INFO L290 TraceCheckUtils]: 18: Hoare triple {6524#false} assume main_#t~switch662#1; {6524#false} is VALID [2022-02-20 22:00:13,472 INFO L290 TraceCheckUtils]: 19: Hoare triple {6524#false} assume 1bv32 == ~ldv_state_variable_3~0;assume { :begin_inline_jmb38x_ms_probe } true;jmb38x_ms_probe_#in~pdev#1.base, jmb38x_ms_probe_#in~pdev#1.offset, jmb38x_ms_probe_#in~dev_id#1.base, jmb38x_ms_probe_#in~dev_id#1.offset := ~jmb38x_ms_driver_group0~0.base, ~jmb38x_ms_driver_group0~0.offset, main_~ldvarg1~0#1.base, main_~ldvarg1~0#1.offset;havoc jmb38x_ms_probe_#res#1;havoc jmb38x_ms_probe_#t~ret606#1, jmb38x_ms_probe_#t~ret607#1, jmb38x_ms_probe_#t~ret608#1, jmb38x_ms_probe_#t~ret609#1, jmb38x_ms_probe_#t~ret610#1, jmb38x_ms_probe_#t~ret611#1.base, jmb38x_ms_probe_#t~ret611#1.offset, jmb38x_ms_probe_#t~ret612#1.base, jmb38x_ms_probe_#t~ret612#1.offset, jmb38x_ms_probe_#t~mem613#1.base, jmb38x_ms_probe_#t~mem613#1.offset, jmb38x_ms_probe_#t~mem614#1.base, jmb38x_ms_probe_#t~mem614#1.offset, jmb38x_ms_probe_#t~ret615#1, jmb38x_ms_probe_#t~mem616#1.base, jmb38x_ms_probe_#t~mem616#1.offset, jmb38x_ms_probe_#t~mem617#1, jmb38x_ms_probe_~pdev#1.base, jmb38x_ms_probe_~pdev#1.offset, jmb38x_ms_probe_~dev_id#1.base, jmb38x_ms_probe_~dev_id#1.offset, jmb38x_ms_probe_~jm~2#1.base, jmb38x_ms_probe_~jm~2#1.offset, jmb38x_ms_probe_~pci_dev_busy~0#1, jmb38x_ms_probe_~rc~5#1, jmb38x_ms_probe_~cnt~3#1, jmb38x_ms_probe_~tmp~40#1.base, jmb38x_ms_probe_~tmp~40#1.offset;jmb38x_ms_probe_~pdev#1.base, jmb38x_ms_probe_~pdev#1.offset := jmb38x_ms_probe_#in~pdev#1.base, jmb38x_ms_probe_#in~pdev#1.offset;jmb38x_ms_probe_~dev_id#1.base, jmb38x_ms_probe_~dev_id#1.offset := jmb38x_ms_probe_#in~dev_id#1.base, jmb38x_ms_probe_#in~dev_id#1.offset;havoc jmb38x_ms_probe_~jm~2#1.base, jmb38x_ms_probe_~jm~2#1.offset;havoc jmb38x_ms_probe_~pci_dev_busy~0#1;havoc jmb38x_ms_probe_~rc~5#1;havoc jmb38x_ms_probe_~cnt~3#1;havoc jmb38x_ms_probe_~tmp~40#1.base, jmb38x_ms_probe_~tmp~40#1.offset;jmb38x_ms_probe_~pci_dev_busy~0#1 := 0bv32;assume { :begin_inline_pci_set_dma_mask } true;pci_set_dma_mask_#in~dev#1.base, pci_set_dma_mask_#in~dev#1.offset, pci_set_dma_mask_#in~mask#1 := jmb38x_ms_probe_~pdev#1.base, jmb38x_ms_probe_~pdev#1.offset, 4294967295bv64;havoc pci_set_dma_mask_#res#1;havoc pci_set_dma_mask_#t~ret146#1, pci_set_dma_mask_~dev#1.base, pci_set_dma_mask_~dev#1.offset, pci_set_dma_mask_~mask#1, pci_set_dma_mask_~tmp~19#1;pci_set_dma_mask_~dev#1.base, pci_set_dma_mask_~dev#1.offset := pci_set_dma_mask_#in~dev#1.base, pci_set_dma_mask_#in~dev#1.offset;pci_set_dma_mask_~mask#1 := pci_set_dma_mask_#in~mask#1;havoc pci_set_dma_mask_~tmp~19#1;assume { :begin_inline_dma_set_mask } true;dma_set_mask_#in~arg0#1.base, dma_set_mask_#in~arg0#1.offset, dma_set_mask_#in~arg1#1 := pci_set_dma_mask_~dev#1.base, ~bvadd64(147bv64, pci_set_dma_mask_~dev#1.offset), pci_set_dma_mask_~mask#1;havoc dma_set_mask_#res#1;havoc dma_set_mask_#t~nondet677#1, dma_set_mask_~arg0#1.base, dma_set_mask_~arg0#1.offset, dma_set_mask_~arg1#1;dma_set_mask_~arg0#1.base, dma_set_mask_~arg0#1.offset := dma_set_mask_#in~arg0#1.base, dma_set_mask_#in~arg0#1.offset;dma_set_mask_~arg1#1 := dma_set_mask_#in~arg1#1;dma_set_mask_#res#1 := dma_set_mask_#t~nondet677#1;havoc dma_set_mask_#t~nondet677#1; {6524#false} is VALID [2022-02-20 22:00:13,473 INFO L290 TraceCheckUtils]: 20: Hoare triple {6524#false} pci_set_dma_mask_#t~ret146#1 := dma_set_mask_#res#1;assume { :end_inline_dma_set_mask } true;pci_set_dma_mask_~tmp~19#1 := pci_set_dma_mask_#t~ret146#1;havoc pci_set_dma_mask_#t~ret146#1;pci_set_dma_mask_#res#1 := pci_set_dma_mask_~tmp~19#1; {6524#false} is VALID [2022-02-20 22:00:13,473 INFO L290 TraceCheckUtils]: 21: Hoare triple {6524#false} jmb38x_ms_probe_#t~ret606#1 := pci_set_dma_mask_#res#1;assume { :end_inline_pci_set_dma_mask } true;jmb38x_ms_probe_~rc~5#1 := jmb38x_ms_probe_#t~ret606#1;havoc jmb38x_ms_probe_#t~ret606#1; {6524#false} is VALID [2022-02-20 22:00:13,484 INFO L290 TraceCheckUtils]: 22: Hoare triple {6524#false} assume !(0bv32 != jmb38x_ms_probe_~rc~5#1); {6524#false} is VALID [2022-02-20 22:00:13,484 INFO L272 TraceCheckUtils]: 23: Hoare triple {6524#false} call jmb38x_ms_probe_#t~ret607#1 := pci_enable_device(jmb38x_ms_probe_~pdev#1.base, jmb38x_ms_probe_~pdev#1.offset); {6524#false} is VALID [2022-02-20 22:00:13,484 INFO L290 TraceCheckUtils]: 24: Hoare triple {6524#false} ~arg0.base, ~arg0.offset := #in~arg0.base, #in~arg0.offset;#res := #t~nondet689;havoc #t~nondet689; {6524#false} is VALID [2022-02-20 22:00:13,485 INFO L290 TraceCheckUtils]: 25: Hoare triple {6524#false} assume true; {6524#false} is VALID [2022-02-20 22:00:13,485 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {6524#false} {6524#false} #2352#return; {6524#false} is VALID [2022-02-20 22:00:13,485 INFO L290 TraceCheckUtils]: 27: Hoare triple {6524#false} jmb38x_ms_probe_~rc~5#1 := jmb38x_ms_probe_#t~ret607#1;havoc jmb38x_ms_probe_#t~ret607#1; {6524#false} is VALID [2022-02-20 22:00:13,485 INFO L290 TraceCheckUtils]: 28: Hoare triple {6524#false} assume !(0bv32 != jmb38x_ms_probe_~rc~5#1); {6524#false} is VALID [2022-02-20 22:00:13,485 INFO L272 TraceCheckUtils]: 29: Hoare triple {6524#false} call pci_set_master(jmb38x_ms_probe_~pdev#1.base, jmb38x_ms_probe_~pdev#1.offset); {6524#false} is VALID [2022-02-20 22:00:13,485 INFO L290 TraceCheckUtils]: 30: Hoare triple {6524#false} ~arg0.base, ~arg0.offset := #in~arg0.base, #in~arg0.offset; {6524#false} is VALID [2022-02-20 22:00:13,485 INFO L290 TraceCheckUtils]: 31: Hoare triple {6524#false} assume true; {6524#false} is VALID [2022-02-20 22:00:13,486 INFO L284 TraceCheckUtils]: 32: Hoare quadruple {6524#false} {6524#false} #2354#return; {6524#false} is VALID [2022-02-20 22:00:13,486 INFO L290 TraceCheckUtils]: 33: Hoare triple {6524#false} assume { :begin_inline_pci_request_regions } true;pci_request_regions_#in~arg0#1.base, pci_request_regions_#in~arg0#1.offset, pci_request_regions_#in~arg1#1.base, pci_request_regions_#in~arg1#1.offset := jmb38x_ms_probe_~pdev#1.base, jmb38x_ms_probe_~pdev#1.offset, 110bv64, 0bv64;havoc pci_request_regions_#res#1;havoc pci_request_regions_#t~nondet690#1, pci_request_regions_~arg0#1.base, pci_request_regions_~arg0#1.offset, pci_request_regions_~arg1#1.base, pci_request_regions_~arg1#1.offset;pci_request_regions_~arg0#1.base, pci_request_regions_~arg0#1.offset := pci_request_regions_#in~arg0#1.base, pci_request_regions_#in~arg0#1.offset;pci_request_regions_~arg1#1.base, pci_request_regions_~arg1#1.offset := pci_request_regions_#in~arg1#1.base, pci_request_regions_#in~arg1#1.offset;pci_request_regions_#res#1 := pci_request_regions_#t~nondet690#1;havoc pci_request_regions_#t~nondet690#1; {6524#false} is VALID [2022-02-20 22:00:13,486 INFO L290 TraceCheckUtils]: 34: Hoare triple {6524#false} jmb38x_ms_probe_#t~ret608#1 := pci_request_regions_#res#1;assume { :end_inline_pci_request_regions } true;jmb38x_ms_probe_~rc~5#1 := jmb38x_ms_probe_#t~ret608#1;havoc jmb38x_ms_probe_#t~ret608#1; {6524#false} is VALID [2022-02-20 22:00:13,486 INFO L290 TraceCheckUtils]: 35: Hoare triple {6524#false} assume !(0bv32 != jmb38x_ms_probe_~rc~5#1); {6524#false} is VALID [2022-02-20 22:00:13,486 INFO L272 TraceCheckUtils]: 36: Hoare triple {6524#false} call jmb38x_ms_probe_#t~ret609#1 := jmb38x_ms_pmos(jmb38x_ms_probe_~pdev#1.base, jmb38x_ms_probe_~pdev#1.offset, 1bv32); {6524#false} is VALID [2022-02-20 22:00:13,486 INFO L290 TraceCheckUtils]: 37: Hoare triple {6524#false} ~pdev.base, ~pdev.offset := #in~pdev.base, #in~pdev.offset;~flag := #in~flag;call ~#val~0.base, ~#val~0.offset := #Ultimate.allocOnStack(1bv64);call ~#descriptor~7.base, ~#descriptor~7.offset := #Ultimate.allocOnStack(37bv64);havoc ~tmp~35;call ~#descriptor___0~5.base, ~#descriptor___0~5.offset := #Ultimate.allocOnStack(37bv64);havoc ~tmp___0~18;call ~#descriptor___1~4.base, ~#descriptor___1~4.offset := #Ultimate.allocOnStack(37bv64);havoc ~tmp___1~11; {6524#false} is VALID [2022-02-20 22:00:13,486 INFO L272 TraceCheckUtils]: 38: Hoare triple {6524#false} call #t~ret520 := pci_read_config_byte(~pdev.base, ~pdev.offset, 174bv32, ~#val~0.base, ~#val~0.offset); {6524#false} is VALID [2022-02-20 22:00:13,487 INFO L290 TraceCheckUtils]: 39: Hoare triple {6524#false} ~dev#1.base, ~dev#1.offset := #in~dev#1.base, #in~dev#1.offset;~where#1 := #in~where#1;~val#1.base, ~val#1.offset := #in~val#1.base, #in~val#1.offset;havoc ~tmp~10#1;call #t~mem67#1.base, #t~mem67#1.offset := read~$Pointer$(~dev#1.base, ~bvadd64(16bv64, ~dev#1.offset), 8bv64);call #t~mem68#1 := read~intINTTYPE4(~dev#1.base, ~bvadd64(56bv64, ~dev#1.offset), 4bv64);assume { :begin_inline_pci_bus_read_config_byte } true;pci_bus_read_config_byte_#in~arg0#1.base, pci_bus_read_config_byte_#in~arg0#1.offset, pci_bus_read_config_byte_#in~arg1#1, pci_bus_read_config_byte_#in~arg2#1, pci_bus_read_config_byte_#in~arg3#1.base, pci_bus_read_config_byte_#in~arg3#1.offset := #t~mem67#1.base, #t~mem67#1.offset, #t~mem68#1, ~where#1, ~val#1.base, ~val#1.offset;havoc pci_bus_read_config_byte_#res#1;havoc pci_bus_read_config_byte_#t~nondet686#1, pci_bus_read_config_byte_~arg0#1.base, pci_bus_read_config_byte_~arg0#1.offset, pci_bus_read_config_byte_~arg1#1, pci_bus_read_config_byte_~arg2#1, pci_bus_read_config_byte_~arg3#1.base, pci_bus_read_config_byte_~arg3#1.offset;pci_bus_read_config_byte_~arg0#1.base, pci_bus_read_config_byte_~arg0#1.offset := pci_bus_read_config_byte_#in~arg0#1.base, pci_bus_read_config_byte_#in~arg0#1.offset;pci_bus_read_config_byte_~arg1#1 := pci_bus_read_config_byte_#in~arg1#1;pci_bus_read_config_byte_~arg2#1 := pci_bus_read_config_byte_#in~arg2#1;pci_bus_read_config_byte_~arg3#1.base, pci_bus_read_config_byte_~arg3#1.offset := pci_bus_read_config_byte_#in~arg3#1.base, pci_bus_read_config_byte_#in~arg3#1.offset;pci_bus_read_config_byte_#res#1 := pci_bus_read_config_byte_#t~nondet686#1;havoc pci_bus_read_config_byte_#t~nondet686#1; {6524#false} is VALID [2022-02-20 22:00:13,487 INFO L290 TraceCheckUtils]: 40: Hoare triple {6524#false} #t~ret69#1 := pci_bus_read_config_byte_#res#1;assume { :end_inline_pci_bus_read_config_byte } true;~tmp~10#1 := #t~ret69#1;havoc #t~mem67#1.base, #t~mem67#1.offset;havoc #t~mem68#1;havoc #t~ret69#1;#res#1 := ~tmp~10#1; {6524#false} is VALID [2022-02-20 22:00:13,487 INFO L290 TraceCheckUtils]: 41: Hoare triple {6524#false} assume true; {6524#false} is VALID [2022-02-20 22:00:13,487 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {6524#false} {6524#false} #2182#return; {6524#false} is VALID [2022-02-20 22:00:13,487 INFO L290 TraceCheckUtils]: 43: Hoare triple {6524#false} havoc #t~ret520; {6524#false} is VALID [2022-02-20 22:00:13,487 INFO L290 TraceCheckUtils]: 44: Hoare triple {6524#false} assume 0bv32 != ~flag;call #t~mem521 := read~intINTTYPE1(~#val~0.base, ~#val~0.offset, 1bv64);call write~intINTTYPE1(~bvor32(71bv32, ~zero_extendFrom8To32(#t~mem521))[8:0], ~#val~0.base, ~#val~0.offset, 1bv64);havoc #t~mem521; {6524#false} is VALID [2022-02-20 22:00:13,487 INFO L290 TraceCheckUtils]: 45: Hoare triple {6524#false} call #t~mem523 := read~intINTTYPE1(~#val~0.base, ~#val~0.offset, 1bv64); {6524#false} is VALID [2022-02-20 22:00:13,488 INFO L272 TraceCheckUtils]: 46: Hoare triple {6524#false} call #t~ret524 := pci_write_config_byte(~pdev.base, ~pdev.offset, 174bv32, ~zero_extendFrom8To32(#t~mem523)[8:0]); {6524#false} is VALID [2022-02-20 22:00:13,488 INFO L290 TraceCheckUtils]: 47: Hoare triple {6524#false} ~dev#1.base, ~dev#1.offset := #in~dev#1.base, #in~dev#1.offset;~where#1 := #in~where#1;~val#1 := #in~val#1;havoc ~tmp~11#1;call #t~mem70#1.base, #t~mem70#1.offset := read~$Pointer$(~dev#1.base, ~bvadd64(16bv64, ~dev#1.offset), 8bv64);call #t~mem71#1 := read~intINTTYPE4(~dev#1.base, ~bvadd64(56bv64, ~dev#1.offset), 4bv64);assume { :begin_inline_pci_bus_write_config_byte } true;pci_bus_write_config_byte_#in~arg0#1.base, pci_bus_write_config_byte_#in~arg0#1.offset, pci_bus_write_config_byte_#in~arg1#1, pci_bus_write_config_byte_#in~arg2#1, pci_bus_write_config_byte_#in~arg3#1 := #t~mem70#1.base, #t~mem70#1.offset, #t~mem71#1, ~where#1, ~zero_extendFrom8To32(~val#1)[8:0];havoc pci_bus_write_config_byte_#res#1;havoc pci_bus_write_config_byte_#t~nondet687#1, pci_bus_write_config_byte_~arg0#1.base, pci_bus_write_config_byte_~arg0#1.offset, pci_bus_write_config_byte_~arg1#1, pci_bus_write_config_byte_~arg2#1, pci_bus_write_config_byte_~arg3#1;pci_bus_write_config_byte_~arg0#1.base, pci_bus_write_config_byte_~arg0#1.offset := pci_bus_write_config_byte_#in~arg0#1.base, pci_bus_write_config_byte_#in~arg0#1.offset;pci_bus_write_config_byte_~arg1#1 := pci_bus_write_config_byte_#in~arg1#1;pci_bus_write_config_byte_~arg2#1 := pci_bus_write_config_byte_#in~arg2#1;pci_bus_write_config_byte_~arg3#1 := pci_bus_write_config_byte_#in~arg3#1;pci_bus_write_config_byte_#res#1 := pci_bus_write_config_byte_#t~nondet687#1;havoc pci_bus_write_config_byte_#t~nondet687#1; {6524#false} is VALID [2022-02-20 22:00:13,488 INFO L290 TraceCheckUtils]: 48: Hoare triple {6524#false} #t~ret72#1 := pci_bus_write_config_byte_#res#1;assume { :end_inline_pci_bus_write_config_byte } true;~tmp~11#1 := #t~ret72#1;havoc #t~mem70#1.base, #t~mem70#1.offset;havoc #t~mem71#1;havoc #t~ret72#1;#res#1 := ~tmp~11#1; {6524#false} is VALID [2022-02-20 22:00:13,488 INFO L290 TraceCheckUtils]: 49: Hoare triple {6524#false} assume true; {6524#false} is VALID [2022-02-20 22:00:13,488 INFO L284 TraceCheckUtils]: 50: Hoare quadruple {6524#false} {6524#false} #2184#return; {6524#false} is VALID [2022-02-20 22:00:13,488 INFO L290 TraceCheckUtils]: 51: Hoare triple {6524#false} havoc #t~mem523;havoc #t~ret524;call write~$Pointer$(93bv64, 0bv64, ~#descriptor~7.base, ~#descriptor~7.offset, 8bv64);call write~$Pointer$(94bv64, 0bv64, ~#descriptor~7.base, ~bvadd64(8bv64, ~#descriptor~7.offset), 8bv64);call write~$Pointer$(95bv64, 0bv64, ~#descriptor~7.base, ~bvadd64(16bv64, ~#descriptor~7.offset), 8bv64);call write~$Pointer$(96bv64, 0bv64, ~#descriptor~7.base, ~bvadd64(24bv64, ~#descriptor~7.offset), 8bv64);call write~intINTTYPE4(845bv32, ~#descriptor~7.base, ~bvadd64(32bv64, ~#descriptor~7.offset), 4bv64);call write~intINTTYPE1(0bv8, ~#descriptor~7.base, ~bvadd64(36bv64, ~#descriptor~7.offset), 1bv64);call #t~mem525 := read~intINTTYPE1(~#descriptor~7.base, ~bvadd64(36bv64, ~#descriptor~7.offset), 1bv64); {6524#false} is VALID [2022-02-20 22:00:13,489 INFO L272 TraceCheckUtils]: 52: Hoare triple {6524#false} call #t~ret526 := ldv__builtin_expect(~bvand64(1bv64, ~zero_extendFrom8To64(#t~mem525)), 0bv64); {6524#false} is VALID [2022-02-20 22:00:13,489 INFO L290 TraceCheckUtils]: 53: Hoare triple {6524#false} ~exp := #in~exp;~c := #in~c;#res := ~exp; {6524#false} is VALID [2022-02-20 22:00:13,489 INFO L290 TraceCheckUtils]: 54: Hoare triple {6524#false} assume true; {6524#false} is VALID [2022-02-20 22:00:13,489 INFO L284 TraceCheckUtils]: 55: Hoare quadruple {6524#false} {6524#false} #2186#return; {6524#false} is VALID [2022-02-20 22:00:13,489 INFO L290 TraceCheckUtils]: 56: Hoare triple {6524#false} ~tmp~35 := #t~ret526;havoc #t~mem525;havoc #t~ret526; {6524#false} is VALID [2022-02-20 22:00:13,489 INFO L290 TraceCheckUtils]: 57: Hoare triple {6524#false} assume 0bv64 != ~tmp~35;havoc #t~nondet527;call #t~mem528 := read~intINTTYPE1(~#val~0.base, ~#val~0.offset, 1bv64);havoc #t~mem528; {6524#false} is VALID [2022-02-20 22:00:13,489 INFO L290 TraceCheckUtils]: 58: Hoare triple {6524#false} call #t~mem529 := read~intINTTYPE8(~pdev.base, ~bvadd64(1580bv64, ~pdev.offset), 8bv64); {6524#false} is VALID [2022-02-20 22:00:13,490 INFO L290 TraceCheckUtils]: 59: Hoare triple {6524#false} assume !(0bv64 != #t~mem529);havoc #t~mem529; {6524#false} is VALID [2022-02-20 22:00:13,490 INFO L272 TraceCheckUtils]: 60: Hoare triple {6524#false} call #t~ret539 := pci_read_config_byte(~pdev.base, ~pdev.offset, 185bv32, ~#val~0.base, ~#val~0.offset); {6524#false} is VALID [2022-02-20 22:00:13,490 INFO L290 TraceCheckUtils]: 61: Hoare triple {6524#false} ~dev#1.base, ~dev#1.offset := #in~dev#1.base, #in~dev#1.offset;~where#1 := #in~where#1;~val#1.base, ~val#1.offset := #in~val#1.base, #in~val#1.offset;havoc ~tmp~10#1;call #t~mem67#1.base, #t~mem67#1.offset := read~$Pointer$(~dev#1.base, ~bvadd64(16bv64, ~dev#1.offset), 8bv64);call #t~mem68#1 := read~intINTTYPE4(~dev#1.base, ~bvadd64(56bv64, ~dev#1.offset), 4bv64);assume { :begin_inline_pci_bus_read_config_byte } true;pci_bus_read_config_byte_#in~arg0#1.base, pci_bus_read_config_byte_#in~arg0#1.offset, pci_bus_read_config_byte_#in~arg1#1, pci_bus_read_config_byte_#in~arg2#1, pci_bus_read_config_byte_#in~arg3#1.base, pci_bus_read_config_byte_#in~arg3#1.offset := #t~mem67#1.base, #t~mem67#1.offset, #t~mem68#1, ~where#1, ~val#1.base, ~val#1.offset;havoc pci_bus_read_config_byte_#res#1;havoc pci_bus_read_config_byte_#t~nondet686#1, pci_bus_read_config_byte_~arg0#1.base, pci_bus_read_config_byte_~arg0#1.offset, pci_bus_read_config_byte_~arg1#1, pci_bus_read_config_byte_~arg2#1, pci_bus_read_config_byte_~arg3#1.base, pci_bus_read_config_byte_~arg3#1.offset;pci_bus_read_config_byte_~arg0#1.base, pci_bus_read_config_byte_~arg0#1.offset := pci_bus_read_config_byte_#in~arg0#1.base, pci_bus_read_config_byte_#in~arg0#1.offset;pci_bus_read_config_byte_~arg1#1 := pci_bus_read_config_byte_#in~arg1#1;pci_bus_read_config_byte_~arg2#1 := pci_bus_read_config_byte_#in~arg2#1;pci_bus_read_config_byte_~arg3#1.base, pci_bus_read_config_byte_~arg3#1.offset := pci_bus_read_config_byte_#in~arg3#1.base, pci_bus_read_config_byte_#in~arg3#1.offset;pci_bus_read_config_byte_#res#1 := pci_bus_read_config_byte_#t~nondet686#1;havoc pci_bus_read_config_byte_#t~nondet686#1; {6524#false} is VALID [2022-02-20 22:00:13,490 INFO L290 TraceCheckUtils]: 62: Hoare triple {6524#false} #t~ret69#1 := pci_bus_read_config_byte_#res#1;assume { :end_inline_pci_bus_read_config_byte } true;~tmp~10#1 := #t~ret69#1;havoc #t~mem67#1.base, #t~mem67#1.offset;havoc #t~mem68#1;havoc #t~ret69#1;#res#1 := ~tmp~10#1; {6524#false} is VALID [2022-02-20 22:00:13,490 INFO L290 TraceCheckUtils]: 63: Hoare triple {6524#false} assume true; {6524#false} is VALID [2022-02-20 22:00:13,490 INFO L284 TraceCheckUtils]: 64: Hoare quadruple {6524#false} {6524#false} #2194#return; {6524#false} is VALID [2022-02-20 22:00:13,490 INFO L290 TraceCheckUtils]: 65: Hoare triple {6524#false} havoc #t~ret539;call #t~mem540 := read~intINTTYPE1(~#val~0.base, ~#val~0.offset, 1bv64); {6524#false} is VALID [2022-02-20 22:00:13,491 INFO L272 TraceCheckUtils]: 66: Hoare triple {6524#false} call #t~ret541 := pci_write_config_byte(~pdev.base, ~pdev.offset, 185bv32, ~bvand32(240bv32, ~zero_extendFrom8To32(#t~mem540))[8:0]); {6524#false} is VALID [2022-02-20 22:00:13,491 INFO L290 TraceCheckUtils]: 67: Hoare triple {6524#false} ~dev#1.base, ~dev#1.offset := #in~dev#1.base, #in~dev#1.offset;~where#1 := #in~where#1;~val#1 := #in~val#1;havoc ~tmp~11#1;call #t~mem70#1.base, #t~mem70#1.offset := read~$Pointer$(~dev#1.base, ~bvadd64(16bv64, ~dev#1.offset), 8bv64);call #t~mem71#1 := read~intINTTYPE4(~dev#1.base, ~bvadd64(56bv64, ~dev#1.offset), 4bv64);assume { :begin_inline_pci_bus_write_config_byte } true;pci_bus_write_config_byte_#in~arg0#1.base, pci_bus_write_config_byte_#in~arg0#1.offset, pci_bus_write_config_byte_#in~arg1#1, pci_bus_write_config_byte_#in~arg2#1, pci_bus_write_config_byte_#in~arg3#1 := #t~mem70#1.base, #t~mem70#1.offset, #t~mem71#1, ~where#1, ~zero_extendFrom8To32(~val#1)[8:0];havoc pci_bus_write_config_byte_#res#1;havoc pci_bus_write_config_byte_#t~nondet687#1, pci_bus_write_config_byte_~arg0#1.base, pci_bus_write_config_byte_~arg0#1.offset, pci_bus_write_config_byte_~arg1#1, pci_bus_write_config_byte_~arg2#1, pci_bus_write_config_byte_~arg3#1;pci_bus_write_config_byte_~arg0#1.base, pci_bus_write_config_byte_~arg0#1.offset := pci_bus_write_config_byte_#in~arg0#1.base, pci_bus_write_config_byte_#in~arg0#1.offset;pci_bus_write_config_byte_~arg1#1 := pci_bus_write_config_byte_#in~arg1#1;pci_bus_write_config_byte_~arg2#1 := pci_bus_write_config_byte_#in~arg2#1;pci_bus_write_config_byte_~arg3#1 := pci_bus_write_config_byte_#in~arg3#1;pci_bus_write_config_byte_#res#1 := pci_bus_write_config_byte_#t~nondet687#1;havoc pci_bus_write_config_byte_#t~nondet687#1; {6524#false} is VALID [2022-02-20 22:00:13,491 INFO L290 TraceCheckUtils]: 68: Hoare triple {6524#false} #t~ret72#1 := pci_bus_write_config_byte_#res#1;assume { :end_inline_pci_bus_write_config_byte } true;~tmp~11#1 := #t~ret72#1;havoc #t~mem70#1.base, #t~mem70#1.offset;havoc #t~mem71#1;havoc #t~ret72#1;#res#1 := ~tmp~11#1; {6524#false} is VALID [2022-02-20 22:00:13,491 INFO L290 TraceCheckUtils]: 69: Hoare triple {6524#false} assume true; {6524#false} is VALID [2022-02-20 22:00:13,491 INFO L284 TraceCheckUtils]: 70: Hoare quadruple {6524#false} {6524#false} #2196#return; {6524#false} is VALID [2022-02-20 22:00:13,491 INFO L290 TraceCheckUtils]: 71: Hoare triple {6524#false} havoc #t~mem540;havoc #t~ret541;call #t~mem542 := read~intINTTYPE1(~#val~0.base, ~#val~0.offset, 1bv64); {6524#false} is VALID [2022-02-20 22:00:13,491 INFO L272 TraceCheckUtils]: 72: Hoare triple {6524#false} call #t~ret543 := pci_write_config_byte(~pdev.base, ~pdev.offset, 185bv32, ~bvor32(1bv32, ~zero_extendFrom8To32(#t~mem542))[8:0]); {6524#false} is VALID [2022-02-20 22:00:13,492 INFO L290 TraceCheckUtils]: 73: Hoare triple {6524#false} ~dev#1.base, ~dev#1.offset := #in~dev#1.base, #in~dev#1.offset;~where#1 := #in~where#1;~val#1 := #in~val#1;havoc ~tmp~11#1;call #t~mem70#1.base, #t~mem70#1.offset := read~$Pointer$(~dev#1.base, ~bvadd64(16bv64, ~dev#1.offset), 8bv64);call #t~mem71#1 := read~intINTTYPE4(~dev#1.base, ~bvadd64(56bv64, ~dev#1.offset), 4bv64);assume { :begin_inline_pci_bus_write_config_byte } true;pci_bus_write_config_byte_#in~arg0#1.base, pci_bus_write_config_byte_#in~arg0#1.offset, pci_bus_write_config_byte_#in~arg1#1, pci_bus_write_config_byte_#in~arg2#1, pci_bus_write_config_byte_#in~arg3#1 := #t~mem70#1.base, #t~mem70#1.offset, #t~mem71#1, ~where#1, ~zero_extendFrom8To32(~val#1)[8:0];havoc pci_bus_write_config_byte_#res#1;havoc pci_bus_write_config_byte_#t~nondet687#1, pci_bus_write_config_byte_~arg0#1.base, pci_bus_write_config_byte_~arg0#1.offset, pci_bus_write_config_byte_~arg1#1, pci_bus_write_config_byte_~arg2#1, pci_bus_write_config_byte_~arg3#1;pci_bus_write_config_byte_~arg0#1.base, pci_bus_write_config_byte_~arg0#1.offset := pci_bus_write_config_byte_#in~arg0#1.base, pci_bus_write_config_byte_#in~arg0#1.offset;pci_bus_write_config_byte_~arg1#1 := pci_bus_write_config_byte_#in~arg1#1;pci_bus_write_config_byte_~arg2#1 := pci_bus_write_config_byte_#in~arg2#1;pci_bus_write_config_byte_~arg3#1 := pci_bus_write_config_byte_#in~arg3#1;pci_bus_write_config_byte_#res#1 := pci_bus_write_config_byte_#t~nondet687#1;havoc pci_bus_write_config_byte_#t~nondet687#1; {6524#false} is VALID [2022-02-20 22:00:13,492 INFO L290 TraceCheckUtils]: 74: Hoare triple {6524#false} #t~ret72#1 := pci_bus_write_config_byte_#res#1;assume { :end_inline_pci_bus_write_config_byte } true;~tmp~11#1 := #t~ret72#1;havoc #t~mem70#1.base, #t~mem70#1.offset;havoc #t~mem71#1;havoc #t~ret72#1;#res#1 := ~tmp~11#1; {6524#false} is VALID [2022-02-20 22:00:13,492 INFO L290 TraceCheckUtils]: 75: Hoare triple {6524#false} assume true; {6524#false} is VALID [2022-02-20 22:00:13,492 INFO L284 TraceCheckUtils]: 76: Hoare quadruple {6524#false} {6524#false} #2198#return; {6524#false} is VALID [2022-02-20 22:00:13,492 INFO L290 TraceCheckUtils]: 77: Hoare triple {6524#false} havoc #t~mem542;havoc #t~ret543;call write~$Pointer$(103bv64, 0bv64, ~#descriptor___1~4.base, ~#descriptor___1~4.offset, 8bv64);call write~$Pointer$(104bv64, 0bv64, ~#descriptor___1~4.base, ~bvadd64(8bv64, ~#descriptor___1~4.offset), 8bv64);call write~$Pointer$(105bv64, 0bv64, ~#descriptor___1~4.base, ~bvadd64(16bv64, ~#descriptor___1~4.offset), 8bv64);call write~$Pointer$(106bv64, 0bv64, ~#descriptor___1~4.base, ~bvadd64(24bv64, ~#descriptor___1~4.offset), 8bv64);call write~intINTTYPE4(860bv32, ~#descriptor___1~4.base, ~bvadd64(32bv64, ~#descriptor___1~4.offset), 4bv64);call write~intINTTYPE1(0bv8, ~#descriptor___1~4.base, ~bvadd64(36bv64, ~#descriptor___1~4.offset), 1bv64);call #t~mem544 := read~intINTTYPE1(~#descriptor___1~4.base, ~bvadd64(36bv64, ~#descriptor___1~4.offset), 1bv64); {6524#false} is VALID [2022-02-20 22:00:13,492 INFO L272 TraceCheckUtils]: 78: Hoare triple {6524#false} call #t~ret545 := ldv__builtin_expect(~bvand64(1bv64, ~zero_extendFrom8To64(#t~mem544)), 0bv64); {6524#false} is VALID [2022-02-20 22:00:13,493 INFO L290 TraceCheckUtils]: 79: Hoare triple {6524#false} ~exp := #in~exp;~c := #in~c;#res := ~exp; {6524#false} is VALID [2022-02-20 22:00:13,493 INFO L290 TraceCheckUtils]: 80: Hoare triple {6524#false} assume true; {6524#false} is VALID [2022-02-20 22:00:13,493 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {6524#false} {6524#false} #2200#return; {6524#false} is VALID [2022-02-20 22:00:13,493 INFO L290 TraceCheckUtils]: 82: Hoare triple {6524#false} ~tmp___1~11 := #t~ret545;havoc #t~mem544;havoc #t~ret545; {6524#false} is VALID [2022-02-20 22:00:13,493 INFO L290 TraceCheckUtils]: 83: Hoare triple {6524#false} assume 0bv64 != ~tmp___1~11;havoc #t~nondet546; {6524#false} is VALID [2022-02-20 22:00:13,493 INFO L290 TraceCheckUtils]: 84: Hoare triple {6524#false} #res := 0bv32;call ULTIMATE.dealloc(~#val~0.base, ~#val~0.offset);havoc ~#val~0.base, ~#val~0.offset;call ULTIMATE.dealloc(~#descriptor~7.base, ~#descriptor~7.offset);havoc ~#descriptor~7.base, ~#descriptor~7.offset;call ULTIMATE.dealloc(~#descriptor___0~5.base, ~#descriptor___0~5.offset);havoc ~#descriptor___0~5.base, ~#descriptor___0~5.offset;call ULTIMATE.dealloc(~#descriptor___1~4.base, ~#descriptor___1~4.offset);havoc ~#descriptor___1~4.base, ~#descriptor___1~4.offset; {6524#false} is VALID [2022-02-20 22:00:13,493 INFO L290 TraceCheckUtils]: 85: Hoare triple {6524#false} assume true; {6524#false} is VALID [2022-02-20 22:00:13,494 INFO L284 TraceCheckUtils]: 86: Hoare quadruple {6524#false} {6524#false} #2356#return; {6524#false} is VALID [2022-02-20 22:00:13,494 INFO L290 TraceCheckUtils]: 87: Hoare triple {6524#false} havoc jmb38x_ms_probe_#t~ret609#1;assume { :begin_inline_jmb38x_ms_count_slots } true;jmb38x_ms_count_slots_#in~pdev#1.base, jmb38x_ms_count_slots_#in~pdev#1.offset := jmb38x_ms_probe_~pdev#1.base, jmb38x_ms_probe_~pdev#1.offset;havoc jmb38x_ms_count_slots_#res#1;havoc jmb38x_ms_count_slots_#t~mem566#1, jmb38x_ms_count_slots_#t~mem567#1, jmb38x_ms_count_slots_#t~mem568#1, jmb38x_ms_count_slots_#t~mem569#1, jmb38x_ms_count_slots_#t~short570#1, jmb38x_ms_count_slots_#t~mem571#1, jmb38x_ms_count_slots_#t~mem572#1, jmb38x_ms_count_slots_#t~short573#1, jmb38x_ms_count_slots_~pdev#1.base, jmb38x_ms_count_slots_~pdev#1.offset, jmb38x_ms_count_slots_~cnt~2#1, jmb38x_ms_count_slots_~rc~4#1;jmb38x_ms_count_slots_~pdev#1.base, jmb38x_ms_count_slots_~pdev#1.offset := jmb38x_ms_count_slots_#in~pdev#1.base, jmb38x_ms_count_slots_#in~pdev#1.offset;havoc jmb38x_ms_count_slots_~cnt~2#1;havoc jmb38x_ms_count_slots_~rc~4#1;jmb38x_ms_count_slots_~rc~4#1 := 0bv32;jmb38x_ms_count_slots_~cnt~2#1 := 0bv32; {6524#false} is VALID [2022-02-20 22:00:13,494 INFO L290 TraceCheckUtils]: 88: Hoare triple {6524#false} assume !~bvsle32(jmb38x_ms_count_slots_~cnt~2#1, 5bv32); {6524#false} is VALID [2022-02-20 22:00:13,494 INFO L290 TraceCheckUtils]: 89: Hoare triple {6524#false} jmb38x_ms_count_slots_#res#1 := jmb38x_ms_count_slots_~rc~4#1; {6524#false} is VALID [2022-02-20 22:00:13,494 INFO L290 TraceCheckUtils]: 90: Hoare triple {6524#false} jmb38x_ms_probe_#t~ret610#1 := jmb38x_ms_count_slots_#res#1;assume { :end_inline_jmb38x_ms_count_slots } true;jmb38x_ms_probe_~cnt~3#1 := jmb38x_ms_probe_#t~ret610#1;havoc jmb38x_ms_probe_#t~ret610#1; {6524#false} is VALID [2022-02-20 22:00:13,494 INFO L290 TraceCheckUtils]: 91: Hoare triple {6524#false} assume !(0bv32 == jmb38x_ms_probe_~cnt~3#1);assume { :begin_inline_kzalloc } true;kzalloc_#in~size#1, kzalloc_#in~flags#1 := ~bvmul64(8bv64, ~bvadd64(2bv64, ~sign_extendFrom32To64(jmb38x_ms_probe_~cnt~3#1))), 208bv32;havoc kzalloc_#res#1.base, kzalloc_#res#1.offset;havoc kzalloc_~size#1, kzalloc_~flags#1;kzalloc_~size#1 := kzalloc_#in~size#1;kzalloc_~flags#1 := kzalloc_#in~flags#1;assume { :begin_inline_ldv_check_alloc_flags } true;ldv_check_alloc_flags_#in~flags#1 := kzalloc_~flags#1;havoc ldv_check_alloc_flags_~flags#1;ldv_check_alloc_flags_~flags#1 := ldv_check_alloc_flags_#in~flags#1; {6524#false} is VALID [2022-02-20 22:00:13,494 INFO L290 TraceCheckUtils]: 92: Hoare triple {6524#false} assume !(0bv32 == ~ldv_spin~0 || 0bv32 == ~bvand32(16bv32, ldv_check_alloc_flags_~flags#1)); {6524#false} is VALID [2022-02-20 22:00:13,495 INFO L272 TraceCheckUtils]: 93: Hoare triple {6524#false} call ldv_error(); {6524#false} is VALID [2022-02-20 22:00:13,495 INFO L290 TraceCheckUtils]: 94: Hoare triple {6524#false} assume !false; {6524#false} is VALID [2022-02-20 22:00:13,495 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2022-02-20 22:00:13,495 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-02-20 22:00:13,893 INFO L290 TraceCheckUtils]: 94: Hoare triple {6524#false} assume !false; {6524#false} is VALID [2022-02-20 22:00:13,893 INFO L272 TraceCheckUtils]: 93: Hoare triple {6524#false} call ldv_error(); {6524#false} is VALID [2022-02-20 22:00:13,894 INFO L290 TraceCheckUtils]: 92: Hoare triple {6524#false} assume !(0bv32 == ~ldv_spin~0 || 0bv32 == ~bvand32(16bv32, ldv_check_alloc_flags_~flags#1)); {6524#false} is VALID [2022-02-20 22:00:13,894 INFO L290 TraceCheckUtils]: 91: Hoare triple {6524#false} assume !(0bv32 == jmb38x_ms_probe_~cnt~3#1);assume { :begin_inline_kzalloc } true;kzalloc_#in~size#1, kzalloc_#in~flags#1 := ~bvmul64(8bv64, ~bvadd64(2bv64, ~sign_extendFrom32To64(jmb38x_ms_probe_~cnt~3#1))), 208bv32;havoc kzalloc_#res#1.base, kzalloc_#res#1.offset;havoc kzalloc_~size#1, kzalloc_~flags#1;kzalloc_~size#1 := kzalloc_#in~size#1;kzalloc_~flags#1 := kzalloc_#in~flags#1;assume { :begin_inline_ldv_check_alloc_flags } true;ldv_check_alloc_flags_#in~flags#1 := kzalloc_~flags#1;havoc ldv_check_alloc_flags_~flags#1;ldv_check_alloc_flags_~flags#1 := ldv_check_alloc_flags_#in~flags#1; {6524#false} is VALID [2022-02-20 22:00:13,894 INFO L290 TraceCheckUtils]: 90: Hoare triple {6524#false} jmb38x_ms_probe_#t~ret610#1 := jmb38x_ms_count_slots_#res#1;assume { :end_inline_jmb38x_ms_count_slots } true;jmb38x_ms_probe_~cnt~3#1 := jmb38x_ms_probe_#t~ret610#1;havoc jmb38x_ms_probe_#t~ret610#1; {6524#false} is VALID [2022-02-20 22:00:13,894 INFO L290 TraceCheckUtils]: 89: Hoare triple {6524#false} jmb38x_ms_count_slots_#res#1 := jmb38x_ms_count_slots_~rc~4#1; {6524#false} is VALID [2022-02-20 22:00:13,894 INFO L290 TraceCheckUtils]: 88: Hoare triple {6524#false} assume !~bvsle32(jmb38x_ms_count_slots_~cnt~2#1, 5bv32); {6524#false} is VALID [2022-02-20 22:00:13,894 INFO L290 TraceCheckUtils]: 87: Hoare triple {6524#false} havoc jmb38x_ms_probe_#t~ret609#1;assume { :begin_inline_jmb38x_ms_count_slots } true;jmb38x_ms_count_slots_#in~pdev#1.base, jmb38x_ms_count_slots_#in~pdev#1.offset := jmb38x_ms_probe_~pdev#1.base, jmb38x_ms_probe_~pdev#1.offset;havoc jmb38x_ms_count_slots_#res#1;havoc jmb38x_ms_count_slots_#t~mem566#1, jmb38x_ms_count_slots_#t~mem567#1, jmb38x_ms_count_slots_#t~mem568#1, jmb38x_ms_count_slots_#t~mem569#1, jmb38x_ms_count_slots_#t~short570#1, jmb38x_ms_count_slots_#t~mem571#1, jmb38x_ms_count_slots_#t~mem572#1, jmb38x_ms_count_slots_#t~short573#1, jmb38x_ms_count_slots_~pdev#1.base, jmb38x_ms_count_slots_~pdev#1.offset, jmb38x_ms_count_slots_~cnt~2#1, jmb38x_ms_count_slots_~rc~4#1;jmb38x_ms_count_slots_~pdev#1.base, jmb38x_ms_count_slots_~pdev#1.offset := jmb38x_ms_count_slots_#in~pdev#1.base, jmb38x_ms_count_slots_#in~pdev#1.offset;havoc jmb38x_ms_count_slots_~cnt~2#1;havoc jmb38x_ms_count_slots_~rc~4#1;jmb38x_ms_count_slots_~rc~4#1 := 0bv32;jmb38x_ms_count_slots_~cnt~2#1 := 0bv32; {6524#false} is VALID [2022-02-20 22:00:13,894 INFO L284 TraceCheckUtils]: 86: Hoare quadruple {6523#true} {6524#false} #2356#return; {6524#false} is VALID [2022-02-20 22:00:13,894 INFO L290 TraceCheckUtils]: 85: Hoare triple {6523#true} assume true; {6523#true} is VALID [2022-02-20 22:00:13,894 INFO L290 TraceCheckUtils]: 84: Hoare triple {6523#true} #res := 0bv32;call ULTIMATE.dealloc(~#val~0.base, ~#val~0.offset);havoc ~#val~0.base, ~#val~0.offset;call ULTIMATE.dealloc(~#descriptor~7.base, ~#descriptor~7.offset);havoc ~#descriptor~7.base, ~#descriptor~7.offset;call ULTIMATE.dealloc(~#descriptor___0~5.base, ~#descriptor___0~5.offset);havoc ~#descriptor___0~5.base, ~#descriptor___0~5.offset;call ULTIMATE.dealloc(~#descriptor___1~4.base, ~#descriptor___1~4.offset);havoc ~#descriptor___1~4.base, ~#descriptor___1~4.offset; {6523#true} is VALID [2022-02-20 22:00:13,894 INFO L290 TraceCheckUtils]: 83: Hoare triple {6523#true} assume 0bv64 != ~tmp___1~11;havoc #t~nondet546; {6523#true} is VALID [2022-02-20 22:00:13,894 INFO L290 TraceCheckUtils]: 82: Hoare triple {6523#true} ~tmp___1~11 := #t~ret545;havoc #t~mem544;havoc #t~ret545; {6523#true} is VALID [2022-02-20 22:00:13,894 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {6523#true} {6523#true} #2200#return; {6523#true} is VALID [2022-02-20 22:00:13,895 INFO L290 TraceCheckUtils]: 80: Hoare triple {6523#true} assume true; {6523#true} is VALID [2022-02-20 22:00:13,895 INFO L290 TraceCheckUtils]: 79: Hoare triple {6523#true} ~exp := #in~exp;~c := #in~c;#res := ~exp; {6523#true} is VALID [2022-02-20 22:00:13,895 INFO L272 TraceCheckUtils]: 78: Hoare triple {6523#true} call #t~ret545 := ldv__builtin_expect(~bvand64(1bv64, ~zero_extendFrom8To64(#t~mem544)), 0bv64); {6523#true} is VALID [2022-02-20 22:00:13,895 INFO L290 TraceCheckUtils]: 77: Hoare triple {6523#true} havoc #t~mem542;havoc #t~ret543;call write~$Pointer$(103bv64, 0bv64, ~#descriptor___1~4.base, ~#descriptor___1~4.offset, 8bv64);call write~$Pointer$(104bv64, 0bv64, ~#descriptor___1~4.base, ~bvadd64(8bv64, ~#descriptor___1~4.offset), 8bv64);call write~$Pointer$(105bv64, 0bv64, ~#descriptor___1~4.base, ~bvadd64(16bv64, ~#descriptor___1~4.offset), 8bv64);call write~$Pointer$(106bv64, 0bv64, ~#descriptor___1~4.base, ~bvadd64(24bv64, ~#descriptor___1~4.offset), 8bv64);call write~intINTTYPE4(860bv32, ~#descriptor___1~4.base, ~bvadd64(32bv64, ~#descriptor___1~4.offset), 4bv64);call write~intINTTYPE1(0bv8, ~#descriptor___1~4.base, ~bvadd64(36bv64, ~#descriptor___1~4.offset), 1bv64);call #t~mem544 := read~intINTTYPE1(~#descriptor___1~4.base, ~bvadd64(36bv64, ~#descriptor___1~4.offset), 1bv64); {6523#true} is VALID [2022-02-20 22:00:13,895 INFO L284 TraceCheckUtils]: 76: Hoare quadruple {6523#true} {6523#true} #2198#return; {6523#true} is VALID [2022-02-20 22:00:13,895 INFO L290 TraceCheckUtils]: 75: Hoare triple {6523#true} assume true; {6523#true} is VALID [2022-02-20 22:00:13,895 INFO L290 TraceCheckUtils]: 74: Hoare triple {6523#true} #t~ret72#1 := pci_bus_write_config_byte_#res#1;assume { :end_inline_pci_bus_write_config_byte } true;~tmp~11#1 := #t~ret72#1;havoc #t~mem70#1.base, #t~mem70#1.offset;havoc #t~mem71#1;havoc #t~ret72#1;#res#1 := ~tmp~11#1; {6523#true} is VALID [2022-02-20 22:00:13,895 INFO L290 TraceCheckUtils]: 73: Hoare triple {6523#true} ~dev#1.base, ~dev#1.offset := #in~dev#1.base, #in~dev#1.offset;~where#1 := #in~where#1;~val#1 := #in~val#1;havoc ~tmp~11#1;call #t~mem70#1.base, #t~mem70#1.offset := read~$Pointer$(~dev#1.base, ~bvadd64(16bv64, ~dev#1.offset), 8bv64);call #t~mem71#1 := read~intINTTYPE4(~dev#1.base, ~bvadd64(56bv64, ~dev#1.offset), 4bv64);assume { :begin_inline_pci_bus_write_config_byte } true;pci_bus_write_config_byte_#in~arg0#1.base, pci_bus_write_config_byte_#in~arg0#1.offset, pci_bus_write_config_byte_#in~arg1#1, pci_bus_write_config_byte_#in~arg2#1, pci_bus_write_config_byte_#in~arg3#1 := #t~mem70#1.base, #t~mem70#1.offset, #t~mem71#1, ~where#1, ~zero_extendFrom8To32(~val#1)[8:0];havoc pci_bus_write_config_byte_#res#1;havoc pci_bus_write_config_byte_#t~nondet687#1, pci_bus_write_config_byte_~arg0#1.base, pci_bus_write_config_byte_~arg0#1.offset, pci_bus_write_config_byte_~arg1#1, pci_bus_write_config_byte_~arg2#1, pci_bus_write_config_byte_~arg3#1;pci_bus_write_config_byte_~arg0#1.base, pci_bus_write_config_byte_~arg0#1.offset := pci_bus_write_config_byte_#in~arg0#1.base, pci_bus_write_config_byte_#in~arg0#1.offset;pci_bus_write_config_byte_~arg1#1 := pci_bus_write_config_byte_#in~arg1#1;pci_bus_write_config_byte_~arg2#1 := pci_bus_write_config_byte_#in~arg2#1;pci_bus_write_config_byte_~arg3#1 := pci_bus_write_config_byte_#in~arg3#1;pci_bus_write_config_byte_#res#1 := pci_bus_write_config_byte_#t~nondet687#1;havoc pci_bus_write_config_byte_#t~nondet687#1; {6523#true} is VALID [2022-02-20 22:00:13,895 INFO L272 TraceCheckUtils]: 72: Hoare triple {6523#true} call #t~ret543 := pci_write_config_byte(~pdev.base, ~pdev.offset, 185bv32, ~bvor32(1bv32, ~zero_extendFrom8To32(#t~mem542))[8:0]); {6523#true} is VALID [2022-02-20 22:00:13,895 INFO L290 TraceCheckUtils]: 71: Hoare triple {6523#true} havoc #t~mem540;havoc #t~ret541;call #t~mem542 := read~intINTTYPE1(~#val~0.base, ~#val~0.offset, 1bv64); {6523#true} is VALID [2022-02-20 22:00:13,895 INFO L284 TraceCheckUtils]: 70: Hoare quadruple {6523#true} {6523#true} #2196#return; {6523#true} is VALID [2022-02-20 22:00:13,895 INFO L290 TraceCheckUtils]: 69: Hoare triple {6523#true} assume true; {6523#true} is VALID [2022-02-20 22:00:13,896 INFO L290 TraceCheckUtils]: 68: Hoare triple {6523#true} #t~ret72#1 := pci_bus_write_config_byte_#res#1;assume { :end_inline_pci_bus_write_config_byte } true;~tmp~11#1 := #t~ret72#1;havoc #t~mem70#1.base, #t~mem70#1.offset;havoc #t~mem71#1;havoc #t~ret72#1;#res#1 := ~tmp~11#1; {6523#true} is VALID [2022-02-20 22:00:13,899 INFO L290 TraceCheckUtils]: 67: Hoare triple {6523#true} ~dev#1.base, ~dev#1.offset := #in~dev#1.base, #in~dev#1.offset;~where#1 := #in~where#1;~val#1 := #in~val#1;havoc ~tmp~11#1;call #t~mem70#1.base, #t~mem70#1.offset := read~$Pointer$(~dev#1.base, ~bvadd64(16bv64, ~dev#1.offset), 8bv64);call #t~mem71#1 := read~intINTTYPE4(~dev#1.base, ~bvadd64(56bv64, ~dev#1.offset), 4bv64);assume { :begin_inline_pci_bus_write_config_byte } true;pci_bus_write_config_byte_#in~arg0#1.base, pci_bus_write_config_byte_#in~arg0#1.offset, pci_bus_write_config_byte_#in~arg1#1, pci_bus_write_config_byte_#in~arg2#1, pci_bus_write_config_byte_#in~arg3#1 := #t~mem70#1.base, #t~mem70#1.offset, #t~mem71#1, ~where#1, ~zero_extendFrom8To32(~val#1)[8:0];havoc pci_bus_write_config_byte_#res#1;havoc pci_bus_write_config_byte_#t~nondet687#1, pci_bus_write_config_byte_~arg0#1.base, pci_bus_write_config_byte_~arg0#1.offset, pci_bus_write_config_byte_~arg1#1, pci_bus_write_config_byte_~arg2#1, pci_bus_write_config_byte_~arg3#1;pci_bus_write_config_byte_~arg0#1.base, pci_bus_write_config_byte_~arg0#1.offset := pci_bus_write_config_byte_#in~arg0#1.base, pci_bus_write_config_byte_#in~arg0#1.offset;pci_bus_write_config_byte_~arg1#1 := pci_bus_write_config_byte_#in~arg1#1;pci_bus_write_config_byte_~arg2#1 := pci_bus_write_config_byte_#in~arg2#1;pci_bus_write_config_byte_~arg3#1 := pci_bus_write_config_byte_#in~arg3#1;pci_bus_write_config_byte_#res#1 := pci_bus_write_config_byte_#t~nondet687#1;havoc pci_bus_write_config_byte_#t~nondet687#1; {6523#true} is VALID [2022-02-20 22:00:13,900 INFO L272 TraceCheckUtils]: 66: Hoare triple {6523#true} call #t~ret541 := pci_write_config_byte(~pdev.base, ~pdev.offset, 185bv32, ~bvand32(240bv32, ~zero_extendFrom8To32(#t~mem540))[8:0]); {6523#true} is VALID [2022-02-20 22:00:13,900 INFO L290 TraceCheckUtils]: 65: Hoare triple {6523#true} havoc #t~ret539;call #t~mem540 := read~intINTTYPE1(~#val~0.base, ~#val~0.offset, 1bv64); {6523#true} is VALID [2022-02-20 22:00:13,900 INFO L284 TraceCheckUtils]: 64: Hoare quadruple {6523#true} {6523#true} #2194#return; {6523#true} is VALID [2022-02-20 22:00:13,900 INFO L290 TraceCheckUtils]: 63: Hoare triple {6523#true} assume true; {6523#true} is VALID [2022-02-20 22:00:13,900 INFO L290 TraceCheckUtils]: 62: Hoare triple {6523#true} #t~ret69#1 := pci_bus_read_config_byte_#res#1;assume { :end_inline_pci_bus_read_config_byte } true;~tmp~10#1 := #t~ret69#1;havoc #t~mem67#1.base, #t~mem67#1.offset;havoc #t~mem68#1;havoc #t~ret69#1;#res#1 := ~tmp~10#1; {6523#true} is VALID [2022-02-20 22:00:13,900 INFO L290 TraceCheckUtils]: 61: Hoare triple {6523#true} ~dev#1.base, ~dev#1.offset := #in~dev#1.base, #in~dev#1.offset;~where#1 := #in~where#1;~val#1.base, ~val#1.offset := #in~val#1.base, #in~val#1.offset;havoc ~tmp~10#1;call #t~mem67#1.base, #t~mem67#1.offset := read~$Pointer$(~dev#1.base, ~bvadd64(16bv64, ~dev#1.offset), 8bv64);call #t~mem68#1 := read~intINTTYPE4(~dev#1.base, ~bvadd64(56bv64, ~dev#1.offset), 4bv64);assume { :begin_inline_pci_bus_read_config_byte } true;pci_bus_read_config_byte_#in~arg0#1.base, pci_bus_read_config_byte_#in~arg0#1.offset, pci_bus_read_config_byte_#in~arg1#1, pci_bus_read_config_byte_#in~arg2#1, pci_bus_read_config_byte_#in~arg3#1.base, pci_bus_read_config_byte_#in~arg3#1.offset := #t~mem67#1.base, #t~mem67#1.offset, #t~mem68#1, ~where#1, ~val#1.base, ~val#1.offset;havoc pci_bus_read_config_byte_#res#1;havoc pci_bus_read_config_byte_#t~nondet686#1, pci_bus_read_config_byte_~arg0#1.base, pci_bus_read_config_byte_~arg0#1.offset, pci_bus_read_config_byte_~arg1#1, pci_bus_read_config_byte_~arg2#1, pci_bus_read_config_byte_~arg3#1.base, pci_bus_read_config_byte_~arg3#1.offset;pci_bus_read_config_byte_~arg0#1.base, pci_bus_read_config_byte_~arg0#1.offset := pci_bus_read_config_byte_#in~arg0#1.base, pci_bus_read_config_byte_#in~arg0#1.offset;pci_bus_read_config_byte_~arg1#1 := pci_bus_read_config_byte_#in~arg1#1;pci_bus_read_config_byte_~arg2#1 := pci_bus_read_config_byte_#in~arg2#1;pci_bus_read_config_byte_~arg3#1.base, pci_bus_read_config_byte_~arg3#1.offset := pci_bus_read_config_byte_#in~arg3#1.base, pci_bus_read_config_byte_#in~arg3#1.offset;pci_bus_read_config_byte_#res#1 := pci_bus_read_config_byte_#t~nondet686#1;havoc pci_bus_read_config_byte_#t~nondet686#1; {6523#true} is VALID [2022-02-20 22:00:13,900 INFO L272 TraceCheckUtils]: 60: Hoare triple {6523#true} call #t~ret539 := pci_read_config_byte(~pdev.base, ~pdev.offset, 185bv32, ~#val~0.base, ~#val~0.offset); {6523#true} is VALID [2022-02-20 22:00:13,900 INFO L290 TraceCheckUtils]: 59: Hoare triple {6523#true} assume !(0bv64 != #t~mem529);havoc #t~mem529; {6523#true} is VALID [2022-02-20 22:00:13,901 INFO L290 TraceCheckUtils]: 58: Hoare triple {6523#true} call #t~mem529 := read~intINTTYPE8(~pdev.base, ~bvadd64(1580bv64, ~pdev.offset), 8bv64); {6523#true} is VALID [2022-02-20 22:00:13,901 INFO L290 TraceCheckUtils]: 57: Hoare triple {6523#true} assume 0bv64 != ~tmp~35;havoc #t~nondet527;call #t~mem528 := read~intINTTYPE1(~#val~0.base, ~#val~0.offset, 1bv64);havoc #t~mem528; {6523#true} is VALID [2022-02-20 22:00:13,901 INFO L290 TraceCheckUtils]: 56: Hoare triple {6523#true} ~tmp~35 := #t~ret526;havoc #t~mem525;havoc #t~ret526; {6523#true} is VALID [2022-02-20 22:00:13,901 INFO L284 TraceCheckUtils]: 55: Hoare quadruple {6523#true} {6523#true} #2186#return; {6523#true} is VALID [2022-02-20 22:00:13,901 INFO L290 TraceCheckUtils]: 54: Hoare triple {6523#true} assume true; {6523#true} is VALID [2022-02-20 22:00:13,901 INFO L290 TraceCheckUtils]: 53: Hoare triple {6523#true} ~exp := #in~exp;~c := #in~c;#res := ~exp; {6523#true} is VALID [2022-02-20 22:00:13,901 INFO L272 TraceCheckUtils]: 52: Hoare triple {6523#true} call #t~ret526 := ldv__builtin_expect(~bvand64(1bv64, ~zero_extendFrom8To64(#t~mem525)), 0bv64); {6523#true} is VALID [2022-02-20 22:00:13,902 INFO L290 TraceCheckUtils]: 51: Hoare triple {6523#true} havoc #t~mem523;havoc #t~ret524;call write~$Pointer$(93bv64, 0bv64, ~#descriptor~7.base, ~#descriptor~7.offset, 8bv64);call write~$Pointer$(94bv64, 0bv64, ~#descriptor~7.base, ~bvadd64(8bv64, ~#descriptor~7.offset), 8bv64);call write~$Pointer$(95bv64, 0bv64, ~#descriptor~7.base, ~bvadd64(16bv64, ~#descriptor~7.offset), 8bv64);call write~$Pointer$(96bv64, 0bv64, ~#descriptor~7.base, ~bvadd64(24bv64, ~#descriptor~7.offset), 8bv64);call write~intINTTYPE4(845bv32, ~#descriptor~7.base, ~bvadd64(32bv64, ~#descriptor~7.offset), 4bv64);call write~intINTTYPE1(0bv8, ~#descriptor~7.base, ~bvadd64(36bv64, ~#descriptor~7.offset), 1bv64);call #t~mem525 := read~intINTTYPE1(~#descriptor~7.base, ~bvadd64(36bv64, ~#descriptor~7.offset), 1bv64); {6523#true} is VALID [2022-02-20 22:00:13,902 INFO L284 TraceCheckUtils]: 50: Hoare quadruple {6523#true} {6523#true} #2184#return; {6523#true} is VALID [2022-02-20 22:00:13,902 INFO L290 TraceCheckUtils]: 49: Hoare triple {6523#true} assume true; {6523#true} is VALID [2022-02-20 22:00:13,902 INFO L290 TraceCheckUtils]: 48: Hoare triple {6523#true} #t~ret72#1 := pci_bus_write_config_byte_#res#1;assume { :end_inline_pci_bus_write_config_byte } true;~tmp~11#1 := #t~ret72#1;havoc #t~mem70#1.base, #t~mem70#1.offset;havoc #t~mem71#1;havoc #t~ret72#1;#res#1 := ~tmp~11#1; {6523#true} is VALID [2022-02-20 22:00:13,902 INFO L290 TraceCheckUtils]: 47: Hoare triple {6523#true} ~dev#1.base, ~dev#1.offset := #in~dev#1.base, #in~dev#1.offset;~where#1 := #in~where#1;~val#1 := #in~val#1;havoc ~tmp~11#1;call #t~mem70#1.base, #t~mem70#1.offset := read~$Pointer$(~dev#1.base, ~bvadd64(16bv64, ~dev#1.offset), 8bv64);call #t~mem71#1 := read~intINTTYPE4(~dev#1.base, ~bvadd64(56bv64, ~dev#1.offset), 4bv64);assume { :begin_inline_pci_bus_write_config_byte } true;pci_bus_write_config_byte_#in~arg0#1.base, pci_bus_write_config_byte_#in~arg0#1.offset, pci_bus_write_config_byte_#in~arg1#1, pci_bus_write_config_byte_#in~arg2#1, pci_bus_write_config_byte_#in~arg3#1 := #t~mem70#1.base, #t~mem70#1.offset, #t~mem71#1, ~where#1, ~zero_extendFrom8To32(~val#1)[8:0];havoc pci_bus_write_config_byte_#res#1;havoc pci_bus_write_config_byte_#t~nondet687#1, pci_bus_write_config_byte_~arg0#1.base, pci_bus_write_config_byte_~arg0#1.offset, pci_bus_write_config_byte_~arg1#1, pci_bus_write_config_byte_~arg2#1, pci_bus_write_config_byte_~arg3#1;pci_bus_write_config_byte_~arg0#1.base, pci_bus_write_config_byte_~arg0#1.offset := pci_bus_write_config_byte_#in~arg0#1.base, pci_bus_write_config_byte_#in~arg0#1.offset;pci_bus_write_config_byte_~arg1#1 := pci_bus_write_config_byte_#in~arg1#1;pci_bus_write_config_byte_~arg2#1 := pci_bus_write_config_byte_#in~arg2#1;pci_bus_write_config_byte_~arg3#1 := pci_bus_write_config_byte_#in~arg3#1;pci_bus_write_config_byte_#res#1 := pci_bus_write_config_byte_#t~nondet687#1;havoc pci_bus_write_config_byte_#t~nondet687#1; {6523#true} is VALID [2022-02-20 22:00:13,902 INFO L272 TraceCheckUtils]: 46: Hoare triple {6523#true} call #t~ret524 := pci_write_config_byte(~pdev.base, ~pdev.offset, 174bv32, ~zero_extendFrom8To32(#t~mem523)[8:0]); {6523#true} is VALID [2022-02-20 22:00:13,902 INFO L290 TraceCheckUtils]: 45: Hoare triple {6523#true} call #t~mem523 := read~intINTTYPE1(~#val~0.base, ~#val~0.offset, 1bv64); {6523#true} is VALID [2022-02-20 22:00:13,903 INFO L290 TraceCheckUtils]: 44: Hoare triple {6523#true} assume 0bv32 != ~flag;call #t~mem521 := read~intINTTYPE1(~#val~0.base, ~#val~0.offset, 1bv64);call write~intINTTYPE1(~bvor32(71bv32, ~zero_extendFrom8To32(#t~mem521))[8:0], ~#val~0.base, ~#val~0.offset, 1bv64);havoc #t~mem521; {6523#true} is VALID [2022-02-20 22:00:13,903 INFO L290 TraceCheckUtils]: 43: Hoare triple {6523#true} havoc #t~ret520; {6523#true} is VALID [2022-02-20 22:00:13,903 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {6523#true} {6523#true} #2182#return; {6523#true} is VALID [2022-02-20 22:00:13,903 INFO L290 TraceCheckUtils]: 41: Hoare triple {6523#true} assume true; {6523#true} is VALID [2022-02-20 22:00:13,903 INFO L290 TraceCheckUtils]: 40: Hoare triple {6523#true} #t~ret69#1 := pci_bus_read_config_byte_#res#1;assume { :end_inline_pci_bus_read_config_byte } true;~tmp~10#1 := #t~ret69#1;havoc #t~mem67#1.base, #t~mem67#1.offset;havoc #t~mem68#1;havoc #t~ret69#1;#res#1 := ~tmp~10#1; {6523#true} is VALID [2022-02-20 22:00:13,903 INFO L290 TraceCheckUtils]: 39: Hoare triple {6523#true} ~dev#1.base, ~dev#1.offset := #in~dev#1.base, #in~dev#1.offset;~where#1 := #in~where#1;~val#1.base, ~val#1.offset := #in~val#1.base, #in~val#1.offset;havoc ~tmp~10#1;call #t~mem67#1.base, #t~mem67#1.offset := read~$Pointer$(~dev#1.base, ~bvadd64(16bv64, ~dev#1.offset), 8bv64);call #t~mem68#1 := read~intINTTYPE4(~dev#1.base, ~bvadd64(56bv64, ~dev#1.offset), 4bv64);assume { :begin_inline_pci_bus_read_config_byte } true;pci_bus_read_config_byte_#in~arg0#1.base, pci_bus_read_config_byte_#in~arg0#1.offset, pci_bus_read_config_byte_#in~arg1#1, pci_bus_read_config_byte_#in~arg2#1, pci_bus_read_config_byte_#in~arg3#1.base, pci_bus_read_config_byte_#in~arg3#1.offset := #t~mem67#1.base, #t~mem67#1.offset, #t~mem68#1, ~where#1, ~val#1.base, ~val#1.offset;havoc pci_bus_read_config_byte_#res#1;havoc pci_bus_read_config_byte_#t~nondet686#1, pci_bus_read_config_byte_~arg0#1.base, pci_bus_read_config_byte_~arg0#1.offset, pci_bus_read_config_byte_~arg1#1, pci_bus_read_config_byte_~arg2#1, pci_bus_read_config_byte_~arg3#1.base, pci_bus_read_config_byte_~arg3#1.offset;pci_bus_read_config_byte_~arg0#1.base, pci_bus_read_config_byte_~arg0#1.offset := pci_bus_read_config_byte_#in~arg0#1.base, pci_bus_read_config_byte_#in~arg0#1.offset;pci_bus_read_config_byte_~arg1#1 := pci_bus_read_config_byte_#in~arg1#1;pci_bus_read_config_byte_~arg2#1 := pci_bus_read_config_byte_#in~arg2#1;pci_bus_read_config_byte_~arg3#1.base, pci_bus_read_config_byte_~arg3#1.offset := pci_bus_read_config_byte_#in~arg3#1.base, pci_bus_read_config_byte_#in~arg3#1.offset;pci_bus_read_config_byte_#res#1 := pci_bus_read_config_byte_#t~nondet686#1;havoc pci_bus_read_config_byte_#t~nondet686#1; {6523#true} is VALID [2022-02-20 22:00:13,904 INFO L272 TraceCheckUtils]: 38: Hoare triple {6523#true} call #t~ret520 := pci_read_config_byte(~pdev.base, ~pdev.offset, 174bv32, ~#val~0.base, ~#val~0.offset); {6523#true} is VALID [2022-02-20 22:00:13,904 INFO L290 TraceCheckUtils]: 37: Hoare triple {6523#true} ~pdev.base, ~pdev.offset := #in~pdev.base, #in~pdev.offset;~flag := #in~flag;call ~#val~0.base, ~#val~0.offset := #Ultimate.allocOnStack(1bv64);call ~#descriptor~7.base, ~#descriptor~7.offset := #Ultimate.allocOnStack(37bv64);havoc ~tmp~35;call ~#descriptor___0~5.base, ~#descriptor___0~5.offset := #Ultimate.allocOnStack(37bv64);havoc ~tmp___0~18;call ~#descriptor___1~4.base, ~#descriptor___1~4.offset := #Ultimate.allocOnStack(37bv64);havoc ~tmp___1~11; {6523#true} is VALID [2022-02-20 22:00:13,904 INFO L272 TraceCheckUtils]: 36: Hoare triple {6524#false} call jmb38x_ms_probe_#t~ret609#1 := jmb38x_ms_pmos(jmb38x_ms_probe_~pdev#1.base, jmb38x_ms_probe_~pdev#1.offset, 1bv32); {6523#true} is VALID [2022-02-20 22:00:13,904 INFO L290 TraceCheckUtils]: 35: Hoare triple {6524#false} assume !(0bv32 != jmb38x_ms_probe_~rc~5#1); {6524#false} is VALID [2022-02-20 22:00:13,904 INFO L290 TraceCheckUtils]: 34: Hoare triple {6524#false} jmb38x_ms_probe_#t~ret608#1 := pci_request_regions_#res#1;assume { :end_inline_pci_request_regions } true;jmb38x_ms_probe_~rc~5#1 := jmb38x_ms_probe_#t~ret608#1;havoc jmb38x_ms_probe_#t~ret608#1; {6524#false} is VALID [2022-02-20 22:00:13,904 INFO L290 TraceCheckUtils]: 33: Hoare triple {6524#false} assume { :begin_inline_pci_request_regions } true;pci_request_regions_#in~arg0#1.base, pci_request_regions_#in~arg0#1.offset, pci_request_regions_#in~arg1#1.base, pci_request_regions_#in~arg1#1.offset := jmb38x_ms_probe_~pdev#1.base, jmb38x_ms_probe_~pdev#1.offset, 110bv64, 0bv64;havoc pci_request_regions_#res#1;havoc pci_request_regions_#t~nondet690#1, pci_request_regions_~arg0#1.base, pci_request_regions_~arg0#1.offset, pci_request_regions_~arg1#1.base, pci_request_regions_~arg1#1.offset;pci_request_regions_~arg0#1.base, pci_request_regions_~arg0#1.offset := pci_request_regions_#in~arg0#1.base, pci_request_regions_#in~arg0#1.offset;pci_request_regions_~arg1#1.base, pci_request_regions_~arg1#1.offset := pci_request_regions_#in~arg1#1.base, pci_request_regions_#in~arg1#1.offset;pci_request_regions_#res#1 := pci_request_regions_#t~nondet690#1;havoc pci_request_regions_#t~nondet690#1; {6524#false} is VALID [2022-02-20 22:00:13,905 INFO L284 TraceCheckUtils]: 32: Hoare quadruple {6523#true} {6524#false} #2354#return; {6524#false} is VALID [2022-02-20 22:00:13,905 INFO L290 TraceCheckUtils]: 31: Hoare triple {6523#true} assume true; {6523#true} is VALID [2022-02-20 22:00:13,905 INFO L290 TraceCheckUtils]: 30: Hoare triple {6523#true} ~arg0.base, ~arg0.offset := #in~arg0.base, #in~arg0.offset; {6523#true} is VALID [2022-02-20 22:00:13,905 INFO L272 TraceCheckUtils]: 29: Hoare triple {6524#false} call pci_set_master(jmb38x_ms_probe_~pdev#1.base, jmb38x_ms_probe_~pdev#1.offset); {6523#true} is VALID [2022-02-20 22:00:13,905 INFO L290 TraceCheckUtils]: 28: Hoare triple {6524#false} assume !(0bv32 != jmb38x_ms_probe_~rc~5#1); {6524#false} is VALID [2022-02-20 22:00:13,905 INFO L290 TraceCheckUtils]: 27: Hoare triple {6524#false} jmb38x_ms_probe_~rc~5#1 := jmb38x_ms_probe_#t~ret607#1;havoc jmb38x_ms_probe_#t~ret607#1; {6524#false} is VALID [2022-02-20 22:00:13,905 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {6523#true} {6524#false} #2352#return; {6524#false} is VALID [2022-02-20 22:00:13,906 INFO L290 TraceCheckUtils]: 25: Hoare triple {6523#true} assume true; {6523#true} is VALID [2022-02-20 22:00:13,906 INFO L290 TraceCheckUtils]: 24: Hoare triple {6523#true} ~arg0.base, ~arg0.offset := #in~arg0.base, #in~arg0.offset;#res := #t~nondet689;havoc #t~nondet689; {6523#true} is VALID [2022-02-20 22:00:13,906 INFO L272 TraceCheckUtils]: 23: Hoare triple {6524#false} call jmb38x_ms_probe_#t~ret607#1 := pci_enable_device(jmb38x_ms_probe_~pdev#1.base, jmb38x_ms_probe_~pdev#1.offset); {6523#true} is VALID [2022-02-20 22:00:13,906 INFO L290 TraceCheckUtils]: 22: Hoare triple {6524#false} assume !(0bv32 != jmb38x_ms_probe_~rc~5#1); {6524#false} is VALID [2022-02-20 22:00:13,906 INFO L290 TraceCheckUtils]: 21: Hoare triple {6524#false} jmb38x_ms_probe_#t~ret606#1 := pci_set_dma_mask_#res#1;assume { :end_inline_pci_set_dma_mask } true;jmb38x_ms_probe_~rc~5#1 := jmb38x_ms_probe_#t~ret606#1;havoc jmb38x_ms_probe_#t~ret606#1; {6524#false} is VALID [2022-02-20 22:00:13,906 INFO L290 TraceCheckUtils]: 20: Hoare triple {6524#false} pci_set_dma_mask_#t~ret146#1 := dma_set_mask_#res#1;assume { :end_inline_dma_set_mask } true;pci_set_dma_mask_~tmp~19#1 := pci_set_dma_mask_#t~ret146#1;havoc pci_set_dma_mask_#t~ret146#1;pci_set_dma_mask_#res#1 := pci_set_dma_mask_~tmp~19#1; {6524#false} is VALID [2022-02-20 22:00:13,906 INFO L290 TraceCheckUtils]: 19: Hoare triple {6524#false} assume 1bv32 == ~ldv_state_variable_3~0;assume { :begin_inline_jmb38x_ms_probe } true;jmb38x_ms_probe_#in~pdev#1.base, jmb38x_ms_probe_#in~pdev#1.offset, jmb38x_ms_probe_#in~dev_id#1.base, jmb38x_ms_probe_#in~dev_id#1.offset := ~jmb38x_ms_driver_group0~0.base, ~jmb38x_ms_driver_group0~0.offset, main_~ldvarg1~0#1.base, main_~ldvarg1~0#1.offset;havoc jmb38x_ms_probe_#res#1;havoc jmb38x_ms_probe_#t~ret606#1, jmb38x_ms_probe_#t~ret607#1, jmb38x_ms_probe_#t~ret608#1, jmb38x_ms_probe_#t~ret609#1, jmb38x_ms_probe_#t~ret610#1, jmb38x_ms_probe_#t~ret611#1.base, jmb38x_ms_probe_#t~ret611#1.offset, jmb38x_ms_probe_#t~ret612#1.base, jmb38x_ms_probe_#t~ret612#1.offset, jmb38x_ms_probe_#t~mem613#1.base, jmb38x_ms_probe_#t~mem613#1.offset, jmb38x_ms_probe_#t~mem614#1.base, jmb38x_ms_probe_#t~mem614#1.offset, jmb38x_ms_probe_#t~ret615#1, jmb38x_ms_probe_#t~mem616#1.base, jmb38x_ms_probe_#t~mem616#1.offset, jmb38x_ms_probe_#t~mem617#1, jmb38x_ms_probe_~pdev#1.base, jmb38x_ms_probe_~pdev#1.offset, jmb38x_ms_probe_~dev_id#1.base, jmb38x_ms_probe_~dev_id#1.offset, jmb38x_ms_probe_~jm~2#1.base, jmb38x_ms_probe_~jm~2#1.offset, jmb38x_ms_probe_~pci_dev_busy~0#1, jmb38x_ms_probe_~rc~5#1, jmb38x_ms_probe_~cnt~3#1, jmb38x_ms_probe_~tmp~40#1.base, jmb38x_ms_probe_~tmp~40#1.offset;jmb38x_ms_probe_~pdev#1.base, jmb38x_ms_probe_~pdev#1.offset := jmb38x_ms_probe_#in~pdev#1.base, jmb38x_ms_probe_#in~pdev#1.offset;jmb38x_ms_probe_~dev_id#1.base, jmb38x_ms_probe_~dev_id#1.offset := jmb38x_ms_probe_#in~dev_id#1.base, jmb38x_ms_probe_#in~dev_id#1.offset;havoc jmb38x_ms_probe_~jm~2#1.base, jmb38x_ms_probe_~jm~2#1.offset;havoc jmb38x_ms_probe_~pci_dev_busy~0#1;havoc jmb38x_ms_probe_~rc~5#1;havoc jmb38x_ms_probe_~cnt~3#1;havoc jmb38x_ms_probe_~tmp~40#1.base, jmb38x_ms_probe_~tmp~40#1.offset;jmb38x_ms_probe_~pci_dev_busy~0#1 := 0bv32;assume { :begin_inline_pci_set_dma_mask } true;pci_set_dma_mask_#in~dev#1.base, pci_set_dma_mask_#in~dev#1.offset, pci_set_dma_mask_#in~mask#1 := jmb38x_ms_probe_~pdev#1.base, jmb38x_ms_probe_~pdev#1.offset, 4294967295bv64;havoc pci_set_dma_mask_#res#1;havoc pci_set_dma_mask_#t~ret146#1, pci_set_dma_mask_~dev#1.base, pci_set_dma_mask_~dev#1.offset, pci_set_dma_mask_~mask#1, pci_set_dma_mask_~tmp~19#1;pci_set_dma_mask_~dev#1.base, pci_set_dma_mask_~dev#1.offset := pci_set_dma_mask_#in~dev#1.base, pci_set_dma_mask_#in~dev#1.offset;pci_set_dma_mask_~mask#1 := pci_set_dma_mask_#in~mask#1;havoc pci_set_dma_mask_~tmp~19#1;assume { :begin_inline_dma_set_mask } true;dma_set_mask_#in~arg0#1.base, dma_set_mask_#in~arg0#1.offset, dma_set_mask_#in~arg1#1 := pci_set_dma_mask_~dev#1.base, ~bvadd64(147bv64, pci_set_dma_mask_~dev#1.offset), pci_set_dma_mask_~mask#1;havoc dma_set_mask_#res#1;havoc dma_set_mask_#t~nondet677#1, dma_set_mask_~arg0#1.base, dma_set_mask_~arg0#1.offset, dma_set_mask_~arg1#1;dma_set_mask_~arg0#1.base, dma_set_mask_~arg0#1.offset := dma_set_mask_#in~arg0#1.base, dma_set_mask_#in~arg0#1.offset;dma_set_mask_~arg1#1 := dma_set_mask_#in~arg1#1;dma_set_mask_#res#1 := dma_set_mask_#t~nondet677#1;havoc dma_set_mask_#t~nondet677#1; {6524#false} is VALID [2022-02-20 22:00:13,907 INFO L290 TraceCheckUtils]: 18: Hoare triple {6524#false} assume main_#t~switch662#1; {6524#false} is VALID [2022-02-20 22:00:13,907 INFO L290 TraceCheckUtils]: 17: Hoare triple {6524#false} assume 0bv32 != ~ldv_state_variable_3~0;main_~tmp___2~9#1 := main_#t~nondet661#1;havoc main_#t~nondet661#1;main_#t~switch662#1 := 0bv32 == main_~tmp___2~9#1; {6524#false} is VALID [2022-02-20 22:00:13,907 INFO L290 TraceCheckUtils]: 16: Hoare triple {6524#false} assume main_#t~switch657#1; {6524#false} is VALID [2022-02-20 22:00:13,908 INFO L290 TraceCheckUtils]: 15: Hoare triple {6524#false} assume !main_#t~switch657#1;main_#t~switch657#1 := main_#t~switch657#1 || 2bv32 == main_~tmp___0~22#1; {6524#false} is VALID [2022-02-20 22:00:13,908 INFO L290 TraceCheckUtils]: 14: Hoare triple {6524#false} assume !main_#t~switch657#1;main_#t~switch657#1 := main_#t~switch657#1 || 1bv32 == main_~tmp___0~22#1; {6524#false} is VALID [2022-02-20 22:00:13,908 INFO L290 TraceCheckUtils]: 13: Hoare triple {6524#false} main_~tmp___0~22#1 := main_#t~nondet656#1;havoc main_#t~nondet656#1;main_#t~switch657#1 := 0bv32 == main_~tmp___0~22#1; {6524#false} is VALID [2022-02-20 22:00:13,908 INFO L290 TraceCheckUtils]: 12: Hoare triple {6524#false} assume { :end_inline_timer_init_2 } true;~ldv_state_variable_2~0 := 1bv32; {6524#false} is VALID [2022-02-20 22:00:13,908 INFO L290 TraceCheckUtils]: 11: Hoare triple {6524#false} assume #Ultimate.C_memset_#res#1.base == #Ultimate.C_memset_#ptr#1.base && #Ultimate.C_memset_#res#1.offset == #Ultimate.C_memset_#ptr#1.offset;main_#t~memset~res655#1.base, main_#t~memset~res655#1.offset := #Ultimate.C_memset_#res#1.base, #Ultimate.C_memset_#res#1.offset;assume { :end_inline_#Ultimate.C_memset } true;havoc main_#t~memset~res655#1.base, main_#t~memset~res655#1.offset;~ldv_state_variable_1~0 := 1bv32;~ref_cnt~0 := 0bv32;~ldv_state_variable_0~0 := 1bv32;~ldv_state_variable_3~0 := 0bv32;assume { :begin_inline_timer_init_2 } true;~ldv_timer_2_0~0 := 0bv32;~ldv_timer_2_1~0 := 0bv32;~ldv_timer_2_2~0 := 0bv32;~ldv_timer_2_3~0 := 0bv32; {6524#false} is VALID [2022-02-20 22:00:13,909 INFO L290 TraceCheckUtils]: 10: Hoare triple {7064#(bvult |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr697#1| |ULTIMATE.start_#Ultimate.C_memset_#amount#1|)} assume !~bvult64(#Ultimate.C_memset_#t~loopctr697#1, #Ultimate.C_memset_#amount#1); {6524#false} is VALID [2022-02-20 22:00:13,998 INFO L290 TraceCheckUtils]: 9: Hoare triple {7068#(bvult (bvadd |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr697#1| (_ bv1 64)) |ULTIMATE.start_#Ultimate.C_memset_#amount#1|)} assume ~bvult64(#Ultimate.C_memset_#t~loopctr697#1, #Ultimate.C_memset_#amount#1);#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#Ultimate.C_memset_#ptr#1.base,~bvadd64(#Ultimate.C_memset_#ptr#1.offset, #Ultimate.C_memset_#t~loopctr697#1) := 0bv64], #memory_$Pointer$.offset[#Ultimate.C_memset_#ptr#1.base,~bvadd64(#Ultimate.C_memset_#ptr#1.offset, #Ultimate.C_memset_#t~loopctr697#1) := ~zero_extendFrom8To64(#Ultimate.C_memset_#value#1[8:0])];#memory_int := #memory_int[#Ultimate.C_memset_#ptr#1.base,~bvadd64(#Ultimate.C_memset_#ptr#1.offset, #Ultimate.C_memset_#t~loopctr697#1) := #Ultimate.C_memset_#value#1[8:0]];#Ultimate.C_memset_#t~loopctr697#1 := ~bvadd64(1bv64, #Ultimate.C_memset_#t~loopctr697#1); {7064#(bvult |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr697#1| |ULTIMATE.start_#Ultimate.C_memset_#amount#1|)} is VALID [2022-02-20 22:00:13,999 INFO L290 TraceCheckUtils]: 8: Hoare triple {6523#true} assume { :end_inline_ldv_initialize } true;assume { :begin_inline_#Ultimate.C_memset } true;#Ultimate.C_memset_#ptr#1.base, #Ultimate.C_memset_#ptr#1.offset, #Ultimate.C_memset_#value#1, #Ultimate.C_memset_#amount#1 := main_~#ldvarg0~0#1.base, main_~#ldvarg0~0#1.offset, 0bv32, 4bv64;havoc #Ultimate.C_memset_#res#1.base, #Ultimate.C_memset_#res#1.offset;havoc #Ultimate.C_memset_#t~loopctr697#1;#Ultimate.C_memset_#t~loopctr697#1 := 0bv64; {7068#(bvult (bvadd |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr697#1| (_ bv1 64)) |ULTIMATE.start_#Ultimate.C_memset_#amount#1|)} is VALID [2022-02-20 22:00:13,999 INFO L290 TraceCheckUtils]: 7: Hoare triple {6523#true} main_~tmp~47#1.base, main_~tmp~47#1.offset := main_#t~ret654#1.base, main_#t~ret654#1.offset;havoc main_#t~ret654#1.base, main_#t~ret654#1.offset;main_~ldvarg1~0#1.base, main_~ldvarg1~0#1.offset := main_~tmp~47#1.base, main_~tmp~47#1.offset;assume { :begin_inline_ldv_initialize } true; {6523#true} is VALID [2022-02-20 22:00:13,999 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {6523#true} {6523#true} #2336#return; {6523#true} is VALID [2022-02-20 22:00:13,999 INFO L290 TraceCheckUtils]: 5: Hoare triple {6523#true} assume true; {6523#true} is VALID [2022-02-20 22:00:13,999 INFO L290 TraceCheckUtils]: 4: Hoare triple {6523#true} assume 0bv32 != ~tmp___0~1#1;#res#1.base, #res#1.offset := 0bv64, 0bv64; {6523#true} is VALID [2022-02-20 22:00:13,999 INFO L290 TraceCheckUtils]: 3: Hoare triple {6523#true} ~size#1 := #in~size#1;havoc ~p~1#1.base, ~p~1#1.offset;havoc ~tmp~5#1.base, ~tmp~5#1.offset;havoc ~tmp___0~1#1;~tmp___0~1#1 := #t~nondet39#1;havoc #t~nondet39#1; {6523#true} is VALID [2022-02-20 22:00:13,999 INFO L272 TraceCheckUtils]: 2: Hoare triple {6523#true} call main_#t~ret654#1.base, main_#t~ret654#1.offset := ldv_zalloc(32bv64); {6523#true} is VALID [2022-02-20 22:00:14,000 INFO L290 TraceCheckUtils]: 1: Hoare triple {6523#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret654#1.base, main_#t~ret654#1.offset, main_#t~memset~res655#1.base, main_#t~memset~res655#1.offset, main_#t~nondet656#1, main_#t~switch657#1, main_#t~nondet658#1, main_#t~switch659#1, main_#t~ret660#1, main_#t~nondet661#1, main_#t~switch662#1, main_#t~ret663#1, main_#t~mem664#1, main_#t~ret665#1, main_#t~ret666#1, main_~ldvarg1~0#1.base, main_~ldvarg1~0#1.offset, main_~tmp~47#1.base, main_~tmp~47#1.offset, main_~#ldvarg0~0#1.base, main_~#ldvarg0~0#1.offset, main_~tmp___0~22#1, main_~tmp___1~14#1, main_~tmp___2~9#1;havoc main_~ldvarg1~0#1.base, main_~ldvarg1~0#1.offset;havoc main_~tmp~47#1.base, main_~tmp~47#1.offset;call main_~#ldvarg0~0#1.base, main_~#ldvarg0~0#1.offset := #Ultimate.allocOnStack(4bv64);havoc main_~tmp___0~22#1;havoc main_~tmp___1~14#1;havoc main_~tmp___2~9#1; {6523#true} is VALID [2022-02-20 22:00:14,000 INFO L290 TraceCheckUtils]: 0: Hoare triple {6523#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv64, 0bv64;assume 0bv1 == #valid[0bv64];assume ~bvult64(0bv64, #StackHeapBarrier);call #Ultimate.allocInit(2bv64, 1bv64);call write~init~intINTTYPE1(48bv8, 1bv64, 0bv64, 1bv64);call write~init~intINTTYPE1(0bv8, 1bv64, 1bv64, 1bv64);call #Ultimate.allocInit(106bv64, 2bv64);call #Ultimate.allocInit(10bv64, 3bv64);call #Ultimate.allocInit(20bv64, 4bv64);call #Ultimate.allocInit(224bv64, 5bv64);call #Ultimate.allocInit(17bv64, 6bv64);call #Ultimate.allocInit(17bv64, 7bv64);call #Ultimate.allocInit(10bv64, 8bv64);call #Ultimate.allocInit(20bv64, 9bv64);call #Ultimate.allocInit(224bv64, 10bv64);call #Ultimate.allocInit(14bv64, 11bv64);call #Ultimate.allocInit(14bv64, 12bv64);call #Ultimate.allocInit(10bv64, 13bv64);call #Ultimate.allocInit(20bv64, 14bv64);call #Ultimate.allocInit(224bv64, 15bv64);call #Ultimate.allocInit(13bv64, 16bv64);call #Ultimate.allocInit(13bv64, 17bv64);call #Ultimate.allocInit(10bv64, 18bv64);call #Ultimate.allocInit(20bv64, 19bv64);call #Ultimate.allocInit(224bv64, 20bv64);call #Ultimate.allocInit(14bv64, 21bv64);call #Ultimate.allocInit(14bv64, 22bv64);call #Ultimate.allocInit(10bv64, 23bv64);call #Ultimate.allocInit(20bv64, 24bv64);call #Ultimate.allocInit(224bv64, 25bv64);call #Ultimate.allocInit(28bv64, 26bv64);call #Ultimate.allocInit(28bv64, 27bv64);call #Ultimate.allocInit(10bv64, 28bv64);call #Ultimate.allocInit(23bv64, 29bv64);call #Ultimate.allocInit(224bv64, 30bv64);call #Ultimate.allocInit(16bv64, 31bv64);call #Ultimate.allocInit(16bv64, 32bv64);call #Ultimate.allocInit(10bv64, 33bv64);call #Ultimate.allocInit(23bv64, 34bv64);call #Ultimate.allocInit(224bv64, 35bv64);call #Ultimate.allocInit(15bv64, 36bv64);call #Ultimate.allocInit(15bv64, 37bv64);call #Ultimate.allocInit(10bv64, 38bv64);call #Ultimate.allocInit(23bv64, 39bv64);call #Ultimate.allocInit(224bv64, 40bv64);call #Ultimate.allocInit(16bv64, 41bv64);call #Ultimate.allocInit(16bv64, 42bv64);call #Ultimate.allocInit(10bv64, 43bv64);call #Ultimate.allocInit(14bv64, 44bv64);call #Ultimate.allocInit(224bv64, 45bv64);call #Ultimate.allocInit(19bv64, 46bv64);call #Ultimate.allocInit(19bv64, 47bv64);call #Ultimate.allocInit(10bv64, 48bv64);call #Ultimate.allocInit(14bv64, 49bv64);call #Ultimate.allocInit(224bv64, 50bv64);call #Ultimate.allocInit(9bv64, 51bv64);call #Ultimate.allocInit(9bv64, 52bv64);call #Ultimate.allocInit(10bv64, 53bv64);call #Ultimate.allocInit(14bv64, 54bv64);call #Ultimate.allocInit(224bv64, 55bv64);call #Ultimate.allocInit(15bv64, 56bv64);call #Ultimate.allocInit(15bv64, 57bv64);call #Ultimate.allocInit(10bv64, 58bv64);call #Ultimate.allocInit(16bv64, 59bv64);call #Ultimate.allocInit(224bv64, 60bv64);call #Ultimate.allocInit(7bv64, 61bv64);call write~init~intINTTYPE1(97bv8, 61bv64, 0bv64, 1bv64);call write~init~intINTTYPE1(98bv8, 61bv64, 1bv64, 1bv64);call write~init~intINTTYPE1(111bv8, 61bv64, 2bv64, 1bv64);call write~init~intINTTYPE1(114bv8, 61bv64, 3bv64, 1bv64);call write~init~intINTTYPE1(116bv8, 61bv64, 4bv64, 1bv64);call write~init~intINTTYPE1(10bv8, 61bv64, 5bv64, 1bv64);call write~init~intINTTYPE1(0bv8, 61bv64, 6bv64, 1bv64);call #Ultimate.allocInit(7bv64, 62bv64);call write~init~intINTTYPE1(97bv8, 62bv64, 0bv64, 1bv64);call write~init~intINTTYPE1(98bv8, 62bv64, 1bv64, 1bv64);call write~init~intINTTYPE1(111bv8, 62bv64, 2bv64, 1bv64);call write~init~intINTTYPE1(114bv8, 62bv64, 3bv64, 1bv64);call write~init~intINTTYPE1(116bv8, 62bv64, 4bv64, 1bv64);call write~init~intINTTYPE1(10bv8, 62bv64, 5bv64, 1bv64);call write~init~intINTTYPE1(0bv8, 62bv64, 6bv64, 1bv64);call #Ultimate.allocInit(10bv64, 63bv64);call #Ultimate.allocInit(22bv64, 64bv64);call #Ultimate.allocInit(224bv64, 65bv64);call #Ultimate.allocInit(16bv64, 66bv64);call #Ultimate.allocInit(16bv64, 67bv64);call #Ultimate.allocInit(10bv64, 68bv64);call #Ultimate.allocInit(16bv64, 69bv64);call #Ultimate.allocInit(224bv64, 70bv64);call #Ultimate.allocInit(19bv64, 71bv64);call #Ultimate.allocInit(19bv64, 72bv64);call #Ultimate.allocInit(10bv64, 73bv64);call #Ultimate.allocInit(16bv64, 74bv64);call #Ultimate.allocInit(224bv64, 75bv64);call #Ultimate.allocInit(15bv64, 76bv64);call #Ultimate.allocInit(15bv64, 77bv64);call #Ultimate.allocInit(10bv64, 78bv64);call #Ultimate.allocInit(20bv64, 79bv64);call #Ultimate.allocInit(224bv64, 80bv64);call #Ultimate.allocInit(10bv64, 81bv64);call #Ultimate.allocInit(10bv64, 82bv64);call #Ultimate.allocInit(10bv64, 83bv64);call #Ultimate.allocInit(20bv64, 84bv64);call #Ultimate.allocInit(224bv64, 85bv64);call #Ultimate.allocInit(11bv64, 86bv64);call #Ultimate.allocInit(11bv64, 87bv64);call #Ultimate.allocInit(10bv64, 88bv64);call #Ultimate.allocInit(20bv64, 89bv64);call #Ultimate.allocInit(224bv64, 90bv64);call #Ultimate.allocInit(31bv64, 91bv64);call #Ultimate.allocInit(31bv64, 92bv64);call #Ultimate.allocInit(10bv64, 93bv64);call #Ultimate.allocInit(15bv64, 94bv64);call #Ultimate.allocInit(224bv64, 95bv64);call #Ultimate.allocInit(28bv64, 96bv64);call #Ultimate.allocInit(28bv64, 97bv64);call #Ultimate.allocInit(10bv64, 98bv64);call #Ultimate.allocInit(15bv64, 99bv64);call #Ultimate.allocInit(224bv64, 100bv64);call #Ultimate.allocInit(28bv64, 101bv64);call #Ultimate.allocInit(28bv64, 102bv64);call #Ultimate.allocInit(10bv64, 103bv64);call #Ultimate.allocInit(15bv64, 104bv64);call #Ultimate.allocInit(224bv64, 105bv64);call #Ultimate.allocInit(42bv64, 106bv64);call #Ultimate.allocInit(42bv64, 107bv64);call #Ultimate.allocInit(22bv64, 108bv64);call #Ultimate.allocInit(17bv64, 109bv64);call #Ultimate.allocInit(10bv64, 110bv64);call #Ultimate.allocInit(10bv64, 111bv64);call #Ultimate.allocInit(17bv64, 112bv64);call #Ultimate.allocInit(224bv64, 113bv64);call #Ultimate.allocInit(16bv64, 114bv64);call #Ultimate.allocInit(16bv64, 115bv64);call #Ultimate.allocInit(10bv64, 116bv64);call #Ultimate.allocInit(17bv64, 117bv64);call #Ultimate.allocInit(224bv64, 118bv64);call #Ultimate.allocInit(14bv64, 119bv64);call #Ultimate.allocInit(14bv64, 120bv64);call #Ultimate.allocInit(10bv64, 121bv64);call #Ultimate.allocInit(10bv64, 122bv64);~ldv_irq_1_3~0 := 0bv32;~ldv_irq_data_1_1~0.base, ~ldv_irq_data_1_1~0.offset := 0bv64, 0bv64;~ldv_irq_1_0~0 := 0bv32;~ldv_timer_list_2_0~0.base, ~ldv_timer_list_2_0~0.offset := 0bv64, 0bv64;~ldv_timer_list_2_1~0.base, ~ldv_timer_list_2_1~0.offset := 0bv64, 0bv64;~ldv_timer_2_1~0 := 0bv32;~ldv_irq_data_1_0~0.base, ~ldv_irq_data_1_0~0.offset := 0bv64, 0bv64;~ldv_state_variable_0~0 := 0bv32;~ldv_timer_2_0~0 := 0bv32;~ldv_state_variable_2~0 := 0bv32;~ldv_irq_data_1_3~0.base, ~ldv_irq_data_1_3~0.offset := 0bv64, 0bv64;~ldv_irq_data_1_2~0.base, ~ldv_irq_data_1_2~0.offset := 0bv64, 0bv64;~jmb38x_ms_driver_group0~0.base, ~jmb38x_ms_driver_group0~0.offset := 0bv64, 0bv64;~ldv_timer_2_2~0 := 0bv32;~ldv_irq_1_2~0 := 0bv32;~ldv_timer_2_3~0 := 0bv32;~LDV_IN_INTERRUPT~0 := 1bv32;~ldv_irq_1_1~0 := 0bv32;~ldv_irq_line_1_3~0 := 0bv32;~ldv_state_variable_3~0 := 0bv32;~ldv_irq_line_1_0~0 := 0bv32;~ref_cnt~0 := 0bv32;~ldv_timer_list_2_3~0.base, ~ldv_timer_list_2_3~0.offset := 0bv64, 0bv64;~ldv_irq_line_1_1~0 := 0bv32;~ldv_state_variable_1~0 := 0bv32;~ldv_timer_list_2_2~0.base, ~ldv_timer_list_2_2~0.offset := 0bv64, 0bv64;~ldv_irq_line_1_2~0 := 0bv32;~no_dma~0 := 0bv8;~#jmb38x_ms_id_tbl~0.base, ~#jmb38x_ms_id_tbl~0.offset := 123bv64, 0bv64;call #Ultimate.allocInit(128bv64, 123bv64);call write~init~intINTTYPE4(6523bv32, ~#jmb38x_ms_id_tbl~0.base, ~#jmb38x_ms_id_tbl~0.offset, 4bv64);call write~init~intINTTYPE4(9091bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(4bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(4294967295bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(8bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(4294967295bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(12bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(16bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(20bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE8(0bv64, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(24bv64, ~#jmb38x_ms_id_tbl~0.offset), 8bv64);call write~init~intINTTYPE4(6523bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(32bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(9096bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(36bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(4294967295bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(40bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(4294967295bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(44bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(48bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(52bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE8(0bv64, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(56bv64, ~#jmb38x_ms_id_tbl~0.offset), 8bv64);call write~init~intINTTYPE4(6523bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(64bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(9107bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(68bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(4294967295bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(72bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(4294967295bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(76bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(80bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(84bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE8(0bv64, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(88bv64, ~#jmb38x_ms_id_tbl~0.offset), 8bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(96bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(100bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(104bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(108bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(112bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(116bv64, ~#jmb38x_ms_id_tbl~0.offset), 4bv64);call write~init~intINTTYPE8(0bv64, ~#jmb38x_ms_id_tbl~0.base, ~bvadd64(120bv64, ~#jmb38x_ms_id_tbl~0.offset), 8bv64);~#jmb38x_ms_driver~0.base, ~#jmb38x_ms_driver~0.offset := 124bv64, 0bv64;call #Ultimate.allocInit(301bv64, 124bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~#jmb38x_ms_driver~0.offset, 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(8bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(121bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(16bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(~#jmb38x_ms_id_tbl~0.base, ~#jmb38x_ms_id_tbl~0.offset, ~#jmb38x_ms_driver~0.base, ~bvadd64(24bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(#funAddr~jmb38x_ms_probe.base, #funAddr~jmb38x_ms_probe.offset, ~#jmb38x_ms_driver~0.base, ~bvadd64(32bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(#funAddr~jmb38x_ms_remove.base, #funAddr~jmb38x_ms_remove.offset, ~#jmb38x_ms_driver~0.base, ~bvadd64(40bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(#funAddr~jmb38x_ms_suspend.base, #funAddr~jmb38x_ms_suspend.offset, ~#jmb38x_ms_driver~0.base, ~bvadd64(48bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(56bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(64bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(#funAddr~jmb38x_ms_resume.base, #funAddr~jmb38x_ms_resume.offset, ~#jmb38x_ms_driver~0.base, ~bvadd64(72bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(80bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(88bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(96bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(104bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(112bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(120bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(128bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~intINTTYPE1(0bv8, ~#jmb38x_ms_driver~0.base, ~bvadd64(136bv64, ~#jmb38x_ms_driver~0.offset), 1bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(137bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(145bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(153bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(161bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(169bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(177bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(185bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(193bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(201bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(209bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_driver~0.base, ~bvadd64(217bv64, ~#jmb38x_ms_driver~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_driver~0.base, ~bvadd64(221bv64, ~#jmb38x_ms_driver~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_driver~0.base, ~bvadd64(225bv64, ~#jmb38x_ms_driver~0.offset), 4bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(229bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(237bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(245bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(253bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(261bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~intINTTYPE4(0bv32, ~#jmb38x_ms_driver~0.base, ~bvadd64(269bv64, ~#jmb38x_ms_driver~0.offset), 4bv64);call write~init~intINTTYPE8(0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(273bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(285bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#jmb38x_ms_driver~0.base, ~bvadd64(293bv64, ~#jmb38x_ms_driver~0.offset), 8bv64);~__mod_pci__jmb38x_ms_id_tbl_device_table~0.vendor := 0bv32;~__mod_pci__jmb38x_ms_id_tbl_device_table~0.device := 0bv32;~__mod_pci__jmb38x_ms_id_tbl_device_table~0.subvendor := 0bv32;~__mod_pci__jmb38x_ms_id_tbl_device_table~0.subdevice := 0bv32;~__mod_pci__jmb38x_ms_id_tbl_device_table~0.class := 0bv32;~__mod_pci__jmb38x_ms_id_tbl_device_table~0.class_mask := 0bv32;~__mod_pci__jmb38x_ms_id_tbl_device_table~0.driver_data := 0bv64;~ldv_retval_0~0 := 0bv32;~ldv_retval_1~0 := 0bv32;~ldv_retval_3~0 := 0bv32;~ldv_retval_2~0 := 0bv32;~ldv_spin~0 := 0bv32; {6523#true} is VALID [2022-02-20 22:00:14,001 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2022-02-20 22:00:14,001 INFO L144 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-02-20 22:00:14,001 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [623796399] [2022-02-20 22:00:14,001 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleMathsat [623796399] provided 0 perfect and 2 imperfect interpolant sequences [2022-02-20 22:00:14,001 INFO L191 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2022-02-20 22:00:14,001 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4] total 6 [2022-02-20 22:00:14,001 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1639885737] [2022-02-20 22:00:14,002 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2022-02-20 22:00:14,003 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 15.333333333333334) internal successors, (92), 6 states have internal predecessors, (92), 2 states have call successors, (22), 2 states have call predecessors, (22), 2 states have return successors, (21), 2 states have call predecessors, (21), 2 states have call successors, (21) Word has length 95 [2022-02-20 22:00:14,005 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 22:00:14,005 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 15.333333333333334) internal successors, (92), 6 states have internal predecessors, (92), 2 states have call successors, (22), 2 states have call predecessors, (22), 2 states have return successors, (21), 2 states have call predecessors, (21), 2 states have call successors, (21) [2022-02-20 22:00:14,320 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 135 edges. 135 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 22:00:14,320 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 22:00:14,321 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-02-20 22:00:14,321 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 22:00:14,321 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-02-20 22:00:14,322 INFO L87 Difference]: Start difference. First operand 853 states and 1203 transitions. Second operand has 6 states, 6 states have (on average 15.333333333333334) internal successors, (92), 6 states have internal predecessors, (92), 2 states have call successors, (22), 2 states have call predecessors, (22), 2 states have return successors, (21), 2 states have call predecessors, (21), 2 states have call successors, (21)