/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data -tc ../../../trunk/examples/toolchains/AutomizerCInline.xml --traceabstraction.trace.refinement.strategy FIXED_PREFERENCES --cacsl2boogietranslator.allow.undefined.functions true --traceabstraction.smt.solver External_ModelsAndUnsatCoreMode --traceabstraction.command.for.external.solver 'cvc5 --incremental --print-success --lang smt' -s ../../../trunk/examples/settings/default/automizer/svcomp-Reach-64bit-Automizer_Bitvector.epf -i ../../../trunk/examples/svcomp/ldv-validator-v0.8/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point_ldv-val-v0.8.cil.out.i -------------------------------------------------------------------------------- This is Ultimate 0.2.5-dev-356b6ba-m [2024-11-01 11:00:22,380 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-11-01 11:00:22,440 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Reach-64bit-Automizer_Bitvector.epf [2024-11-01 11:00:22,449 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-11-01 11:00:22,449 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-11-01 11:00:22,481 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-11-01 11:00:22,482 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-11-01 11:00:22,482 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-11-01 11:00:22,483 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-11-01 11:00:22,483 INFO L153 SettingsManager]: * Use memory slicer=true [2024-11-01 11:00:22,483 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-11-01 11:00:22,484 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-11-01 11:00:22,485 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-11-01 11:00:22,486 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-11-01 11:00:22,487 INFO L153 SettingsManager]: * Use SBE=true [2024-11-01 11:00:22,487 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-11-01 11:00:22,487 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-11-01 11:00:22,487 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-11-01 11:00:22,488 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-11-01 11:00:22,488 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-11-01 11:00:22,488 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-11-01 11:00:22,491 INFO L153 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2024-11-01 11:00:22,491 INFO L153 SettingsManager]: * Use bitvectors instead of ints=true [2024-11-01 11:00:22,492 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-11-01 11:00:22,492 INFO L153 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2024-11-01 11:00:22,492 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-11-01 11:00:22,493 INFO L153 SettingsManager]: * Use constant arrays=true [2024-11-01 11:00:22,493 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-11-01 11:00:22,493 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-01 11:00:22,493 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-11-01 11:00:22,494 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-11-01 11:00:22,494 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-11-01 11:00:22,494 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-11-01 11:00:22,494 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-11-01 11:00:22,495 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-11-01 11:00:22,495 INFO L153 SettingsManager]: * Trace refinement strategy=WOLF [2024-11-01 11:00:22,495 INFO L153 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2024-11-01 11:00:22,495 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-11-01 11:00:22,495 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-11-01 11:00:22,495 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-11-01 11:00:22,495 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-11-01 11:00:22,496 INFO L153 SettingsManager]: * Logic for external solver=AUFBV [2024-11-01 11:00:22,496 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: Trace refinement strategy -> FIXED_PREFERENCES Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Allow undefined functions -> true Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: SMT solver -> External_ModelsAndUnsatCoreMode Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: Command for external solver -> cvc5 --incremental --print-success --lang smt [2024-11-01 11:00:22,763 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-11-01 11:00:22,784 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-11-01 11:00:22,786 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-11-01 11:00:22,787 INFO L270 PluginConnector]: Initializing CDTParser... [2024-11-01 11:00:22,787 INFO L274 PluginConnector]: CDTParser initialized [2024-11-01 11:00:22,789 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/ldv-validator-v0.8/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point_ldv-val-v0.8.cil.out.i [2024-11-01 11:00:23,975 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-11-01 11:00:24,282 INFO L384 CDTParser]: Found 1 translation units. [2024-11-01 11:00:24,282 INFO L180 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/ldv-validator-v0.8/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point_ldv-val-v0.8.cil.out.i [2024-11-01 11:00:24,299 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/a9c6375e3/45b1db210b4640b7afa7a743f176d008/FLAG12e4c61a9 [2024-11-01 11:00:24,312 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/a9c6375e3/45b1db210b4640b7afa7a743f176d008 [2024-11-01 11:00:24,315 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-11-01 11:00:24,316 INFO L133 ToolchainWalker]: Walking toolchain with 5 elements. [2024-11-01 11:00:24,317 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-11-01 11:00:24,317 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-11-01 11:00:24,322 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-11-01 11:00:24,322 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 01.11 11:00:24" (1/1) ... [2024-11-01 11:00:24,323 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@38aa8174 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 01.11 11:00:24, skipping insertion in model container [2024-11-01 11:00:24,323 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 01.11 11:00:24" (1/1) ... [2024-11-01 11:00:24,365 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-11-01 11:00:24,646 WARN L1053 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-01 11:00:24,647 WARN L1053 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-01 11:00:24,654 WARN L1053 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-01 11:00:24,666 WARN L1053 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-01 11:00:24,678 WARN L1053 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-01 11:00:24,679 WARN L1053 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-01 11:00:24,680 WARN L1053 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-01 11:00:24,681 WARN L1053 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-01 11:00:24,682 WARN L1053 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-01 11:00:24,683 WARN L1053 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-01 11:00:24,687 WARN L1053 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-01 11:00:24,690 WARN L1053 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-01 11:00:24,708 WARN L1053 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-01 11:00:24,731 WARN L251 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/ldv-validator-v0.8/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point_ldv-val-v0.8.cil.out.i[37767,37780] [2024-11-01 11:00:24,753 WARN L1053 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-01 11:00:24,754 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-01 11:00:24,772 INFO L200 MainTranslator]: Completed pre-run [2024-11-01 11:00:24,842 WARN L251 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/ldv-validator-v0.8/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point_ldv-val-v0.8.cil.out.i[37767,37780] [2024-11-01 11:00:24,855 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-01 11:00:24,887 INFO L204 MainTranslator]: Completed translation [2024-11-01 11:00:24,889 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 01.11 11:00:24 WrapperNode [2024-11-01 11:00:24,889 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-11-01 11:00:24,890 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-11-01 11:00:24,890 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-11-01 11:00:24,890 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-11-01 11:00:24,895 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 01.11 11:00:24" (1/1) ... [2024-11-01 11:00:24,919 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 01.11 11:00:24" (1/1) ... [2024-11-01 11:00:24,962 INFO L138 Inliner]: procedures = 86, calls = 178, calls flagged for inlining = 33, calls inlined = 26, statements flattened = 534 [2024-11-01 11:00:24,966 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-11-01 11:00:24,967 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-11-01 11:00:24,967 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-11-01 11:00:24,967 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-11-01 11:00:24,975 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 01.11 11:00:24" (1/1) ... [2024-11-01 11:00:24,975 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 01.11 11:00:24" (1/1) ... [2024-11-01 11:00:24,984 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 01.11 11:00:24" (1/1) ... [2024-11-01 11:00:25,036 INFO L175 MemorySlicer]: Split 55 memory accesses to 4 slices as follows [2, 4, 27, 22]. 49 percent of accesses are in the largest equivalence class. The 6 initializations are split as follows [2, 4, 0, 0]. The 35 writes are split as follows [0, 0, 13, 22]. [2024-11-01 11:00:25,036 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 01.11 11:00:24" (1/1) ... [2024-11-01 11:00:25,037 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 01.11 11:00:24" (1/1) ... [2024-11-01 11:00:25,061 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 01.11 11:00:24" (1/1) ... [2024-11-01 11:00:25,066 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 01.11 11:00:24" (1/1) ... [2024-11-01 11:00:25,074 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 01.11 11:00:24" (1/1) ... [2024-11-01 11:00:25,080 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 01.11 11:00:24" (1/1) ... [2024-11-01 11:00:25,088 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-11-01 11:00:25,089 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-11-01 11:00:25,089 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-11-01 11:00:25,091 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-11-01 11:00:25,092 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 01.11 11:00:24" (1/1) ... [2024-11-01 11:00:25,097 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-11-01 11:00:25,104 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-01 11:00:25,116 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-11-01 11:00:25,119 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-11-01 11:00:25,139 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_hwmon_remove_raw [2024-11-01 11:00:25,139 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_hwmon_remove_raw [2024-11-01 11:00:25,139 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_hwmon_probe [2024-11-01 11:00:25,139 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_hwmon_probe [2024-11-01 11:00:25,139 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-11-01 11:00:25,139 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2024-11-01 11:00:25,140 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2024-11-01 11:00:25,140 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2024-11-01 11:00:25,140 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#0 [2024-11-01 11:00:25,140 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#1 [2024-11-01 11:00:25,140 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#2 [2024-11-01 11:00:25,140 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#3 [2024-11-01 11:00:25,140 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4#0 [2024-11-01 11:00:25,140 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4#1 [2024-11-01 11:00:25,141 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4#2 [2024-11-01 11:00:25,141 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4#3 [2024-11-01 11:00:25,141 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#0 [2024-11-01 11:00:25,141 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#1 [2024-11-01 11:00:25,141 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#2 [2024-11-01 11:00:25,141 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#3 [2024-11-01 11:00:25,141 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2024-11-01 11:00:25,141 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2024-11-01 11:00:25,141 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2024-11-01 11:00:25,141 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2024-11-01 11:00:25,142 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#0 [2024-11-01 11:00:25,142 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#1 [2024-11-01 11:00:25,142 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#2 [2024-11-01 11:00:25,142 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#3 [2024-11-01 11:00:25,142 INFO L130 BoogieDeclarations]: Found specification of procedure PTR_ERR [2024-11-01 11:00:25,142 INFO L138 BoogieDeclarations]: Found implementation of procedure PTR_ERR [2024-11-01 11:00:25,142 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err [2024-11-01 11:00:25,142 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err [2024-11-01 11:00:25,142 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2024-11-01 11:00:25,142 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2024-11-01 11:00:25,142 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1#0 [2024-11-01 11:00:25,143 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1#1 [2024-11-01 11:00:25,143 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1#2 [2024-11-01 11:00:25,143 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1#3 [2024-11-01 11:00:25,143 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_hwmon_remove_attr [2024-11-01 11:00:25,143 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_hwmon_remove_attr [2024-11-01 11:00:25,144 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2024-11-01 11:00:25,144 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4#0 [2024-11-01 11:00:25,144 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4#1 [2024-11-01 11:00:25,145 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4#2 [2024-11-01 11:00:25,145 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4#3 [2024-11-01 11:00:25,145 INFO L130 BoogieDeclarations]: Found specification of procedure platform_get_drvdata [2024-11-01 11:00:25,145 INFO L138 BoogieDeclarations]: Found implementation of procedure platform_get_drvdata [2024-11-01 11:00:25,145 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1#0 [2024-11-01 11:00:25,145 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1#1 [2024-11-01 11:00:25,146 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1#2 [2024-11-01 11:00:25,146 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1#3 [2024-11-01 11:00:25,146 INFO L130 BoogieDeclarations]: Found specification of procedure hwmon_device_unregister [2024-11-01 11:00:25,147 INFO L138 BoogieDeclarations]: Found implementation of procedure hwmon_device_unregister [2024-11-01 11:00:25,147 INFO L130 BoogieDeclarations]: Found specification of procedure dev_err [2024-11-01 11:00:25,147 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_err [2024-11-01 11:00:25,147 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_adc_release [2024-11-01 11:00:25,147 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_adc_release [2024-11-01 11:00:25,148 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1#0 [2024-11-01 11:00:25,148 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1#1 [2024-11-01 11:00:25,148 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1#2 [2024-11-01 11:00:25,148 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1#3 [2024-11-01 11:00:25,148 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2024-11-01 11:00:25,148 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2024-11-01 11:00:25,148 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_hwmon_remove [2024-11-01 11:00:25,149 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_hwmon_remove [2024-11-01 11:00:25,149 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2024-11-01 11:00:25,149 INFO L130 BoogieDeclarations]: Found specification of procedure device_remove_file [2024-11-01 11:00:25,149 INFO L138 BoogieDeclarations]: Found implementation of procedure device_remove_file [2024-11-01 11:00:25,149 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-11-01 11:00:25,150 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-11-01 11:00:25,150 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_device_create_file [2024-11-01 11:00:25,150 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_device_create_file [2024-11-01 11:00:25,150 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2024-11-01 11:00:25,150 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2024-11-01 11:00:25,374 INFO L238 CfgBuilder]: Building ICFG [2024-11-01 11:00:25,376 INFO L264 CfgBuilder]: Building CFG for each procedure with an implementation [2024-11-01 11:00:25,918 INFO L735 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2024-11-01 11:00:30,309 INFO L? ?]: Removed 254 outVars from TransFormulas that were not future-live. [2024-11-01 11:00:30,309 INFO L287 CfgBuilder]: Performing block encoding [2024-11-01 11:00:30,329 INFO L311 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-11-01 11:00:30,329 INFO L316 CfgBuilder]: Removed 2 assume(true) statements. [2024-11-01 11:00:30,330 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 01.11 11:00:30 BoogieIcfgContainer [2024-11-01 11:00:30,330 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-11-01 11:00:30,332 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-11-01 11:00:30,332 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-11-01 11:00:30,334 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-11-01 11:00:30,335 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 01.11 11:00:24" (1/3) ... [2024-11-01 11:00:30,335 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5cdb5fb0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 01.11 11:00:30, skipping insertion in model container [2024-11-01 11:00:30,335 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 01.11 11:00:24" (2/3) ... [2024-11-01 11:00:30,336 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5cdb5fb0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 01.11 11:00:30, skipping insertion in model container [2024-11-01 11:00:30,336 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 01.11 11:00:30" (3/3) ... [2024-11-01 11:00:30,337 INFO L112 eAbstractionObserver]: Analyzing ICFG linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point_ldv-val-v0.8.cil.out.i [2024-11-01 11:00:30,349 INFO L214 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-11-01 11:00:30,349 INFO L154 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2024-11-01 11:00:30,411 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-11-01 11:00:30,416 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@21937fc0, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-11-01 11:00:30,416 INFO L334 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-11-01 11:00:30,420 INFO L276 IsEmpty]: Start isEmpty. Operand has 224 states, 157 states have (on average 1.286624203821656) internal successors, (202), 165 states have internal predecessors, (202), 48 states have call successors, (48), 18 states have call predecessors, (48), 17 states have return successors, (44), 44 states have call predecessors, (44), 44 states have call successors, (44) [2024-11-01 11:00:30,434 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2024-11-01 11:00:30,434 INFO L207 NwaCegarLoop]: Found error trace [2024-11-01 11:00:30,435 INFO L215 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-01 11:00:30,436 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_device_create_fileErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_device_create_fileErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-01 11:00:30,440 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-01 11:00:30,441 INFO L85 PathProgramCache]: Analyzing trace with hash -1138481429, now seen corresponding path program 1 times [2024-11-01 11:00:30,451 INFO L118 FreeRefinementEngine]: Executing refinement strategy FIXED_PREFERENCES [2024-11-01 11:00:30,452 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModulePreferences [885079993] [2024-11-01 11:00:30,453 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-01 11:00:30,454 INFO L173 SolverBuilder]: Constructing external solver with command: cvc5 --incremental --print-success --lang smt [2024-11-01 11:00:30,455 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc5 [2024-11-01 11:00:30,457 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc5 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2024-11-01 11:00:30,459 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc5 --incremental --print-success --lang smt (2)] Waiting until timeout for monitored process [2024-11-01 11:00:30,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-01 11:00:30,780 INFO L255 TraceCheckSpWp]: Trace formula consists of 448 conjuncts, 2 conjuncts are in the unsatisfiable core [2024-11-01 11:00:30,786 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-01 11:00:30,847 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-11-01 11:00:30,848 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-11-01 11:00:30,947 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-11-01 11:00:30,948 INFO L136 FreeRefinementEngine]: Strategy FIXED_PREFERENCES found an infeasible trace [2024-11-01 11:00:30,948 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModulePreferences [885079993] [2024-11-01 11:00:30,949 INFO L158 FreeRefinementEngine]: IpTcStrategyModulePreferences [885079993] provided 2 perfect and 0 imperfect interpolant sequences [2024-11-01 11:00:30,949 INFO L185 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2024-11-01 11:00:30,949 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2024-11-01 11:00:30,950 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1096880709] [2024-11-01 11:00:30,951 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2024-11-01 11:00:30,954 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-01 11:00:30,954 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy FIXED_PREFERENCES [2024-11-01 11:00:30,968 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-01 11:00:30,968 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-01 11:00:30,970 INFO L87 Difference]: Start difference. First operand has 224 states, 157 states have (on average 1.286624203821656) internal successors, (202), 165 states have internal predecessors, (202), 48 states have call successors, (48), 18 states have call predecessors, (48), 17 states have return successors, (44), 44 states have call predecessors, (44), 44 states have call successors, (44) Second operand has 3 states, 3 states have (on average 19.666666666666668) internal successors, (59), 3 states have internal predecessors, (59), 2 states have call successors, (14), 2 states have call predecessors, (14), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2024-11-01 11:00:31,050 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-01 11:00:31,051 INFO L93 Difference]: Finished difference Result 471 states and 637 transitions. [2024-11-01 11:00:31,052 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-01 11:00:31,053 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 19.666666666666668) internal successors, (59), 3 states have internal predecessors, (59), 2 states have call successors, (14), 2 states have call predecessors, (14), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 73 [2024-11-01 11:00:31,053 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-01 11:00:31,066 INFO L225 Difference]: With dead ends: 471 [2024-11-01 11:00:31,067 INFO L226 Difference]: Without dead ends: 228 [2024-11-01 11:00:31,075 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 144 GetRequests, 143 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-01 11:00:31,080 INFO L432 NwaCegarLoop]: 290 mSDtfsCounter, 35 mSDsluCounter, 276 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 35 SdHoareTripleChecker+Valid, 566 SdHoareTripleChecker+Invalid, 14 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-01 11:00:31,081 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [35 Valid, 566 Invalid, 14 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-01 11:00:31,095 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 228 states. [2024-11-01 11:00:31,118 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 228 to 228. [2024-11-01 11:00:31,119 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 228 states, 166 states have (on average 1.2650602409638554) internal successors, (210), 169 states have internal predecessors, (210), 44 states have call successors, (44), 17 states have call predecessors, (44), 17 states have return successors, (44), 44 states have call predecessors, (44), 44 states have call successors, (44) [2024-11-01 11:00:31,122 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 228 states to 228 states and 298 transitions. [2024-11-01 11:00:31,127 INFO L78 Accepts]: Start accepts. Automaton has 228 states and 298 transitions. Word has length 73 [2024-11-01 11:00:31,127 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-01 11:00:31,127 INFO L471 AbstractCegarLoop]: Abstraction has 228 states and 298 transitions. [2024-11-01 11:00:31,128 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 19.666666666666668) internal successors, (59), 3 states have internal predecessors, (59), 2 states have call successors, (14), 2 states have call predecessors, (14), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2024-11-01 11:00:31,128 INFO L276 IsEmpty]: Start isEmpty. Operand 228 states and 298 transitions. [2024-11-01 11:00:31,131 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 98 [2024-11-01 11:00:31,131 INFO L207 NwaCegarLoop]: Found error trace [2024-11-01 11:00:31,131 INFO L215 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-01 11:00:31,138 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc5 --incremental --print-success --lang smt (2)] Ended with exit code 0 [2024-11-01 11:00:31,333 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc5 --incremental --print-success --lang smt [2024-11-01 11:00:31,334 INFO L396 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_device_create_fileErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_device_create_fileErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-01 11:00:31,334 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-01 11:00:31,334 INFO L85 PathProgramCache]: Analyzing trace with hash -215265634, now seen corresponding path program 1 times [2024-11-01 11:00:31,335 INFO L118 FreeRefinementEngine]: Executing refinement strategy FIXED_PREFERENCES [2024-11-01 11:00:31,335 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModulePreferences [490075220] [2024-11-01 11:00:31,335 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-01 11:00:31,335 INFO L173 SolverBuilder]: Constructing external solver with command: cvc5 --incremental --print-success --lang smt [2024-11-01 11:00:31,335 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc5 [2024-11-01 11:00:31,338 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc5 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2024-11-01 11:00:31,338 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc5 --incremental --print-success --lang smt (3)] Waiting until timeout for monitored process [2024-11-01 11:00:31,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-01 11:00:31,927 WARN L253 TraceCheckSpWp]: Trace formula consists of 494 conjuncts, 364 conjuncts are in the unsatisfiable core [2024-11-01 11:00:31,956 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-01 11:00:32,676 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-11-01 11:00:32,677 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-11-01 11:00:33,648 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-01 11:00:33,649 INFO L136 FreeRefinementEngine]: Strategy FIXED_PREFERENCES found an infeasible trace [2024-11-01 11:00:33,649 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModulePreferences [490075220] [2024-11-01 11:00:33,649 INFO L158 FreeRefinementEngine]: IpTcStrategyModulePreferences [490075220] provided 1 perfect and 1 imperfect interpolant sequences [2024-11-01 11:00:33,649 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-11-01 11:00:33,649 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [7] total 15 [2024-11-01 11:00:33,649 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2063036614] [2024-11-01 11:00:33,649 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-01 11:00:33,654 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2024-11-01 11:00:33,654 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy FIXED_PREFERENCES [2024-11-01 11:00:33,655 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2024-11-01 11:00:33,655 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=42, Invalid=168, Unknown=0, NotChecked=0, Total=210 [2024-11-01 11:00:33,655 INFO L87 Difference]: Start difference. First operand 228 states and 298 transitions. Second operand has 10 states, 9 states have (on average 7.666666666666667) internal successors, (69), 8 states have internal predecessors, (69), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (8), 2 states have call predecessors, (8), 3 states have call successors, (8) [2024-11-01 11:00:37,676 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-01 11:00:41,684 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-01 11:00:45,693 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-01 11:00:49,699 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-01 11:00:53,705 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-01 11:00:57,713 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-01 11:01:02,160 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-01 11:01:02,160 INFO L93 Difference]: Finished difference Result 694 states and 917 transitions. [2024-11-01 11:01:02,161 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2024-11-01 11:01:02,161 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 9 states have (on average 7.666666666666667) internal successors, (69), 8 states have internal predecessors, (69), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (8), 2 states have call predecessors, (8), 3 states have call successors, (8) Word has length 97 [2024-11-01 11:01:02,161 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-01 11:01:02,168 INFO L225 Difference]: With dead ends: 694 [2024-11-01 11:01:02,168 INFO L226 Difference]: Without dead ends: 467 [2024-11-01 11:01:02,169 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 198 GetRequests, 179 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 68 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=84, Invalid=336, Unknown=0, NotChecked=0, Total=420 [2024-11-01 11:01:02,169 INFO L432 NwaCegarLoop]: 256 mSDtfsCounter, 278 mSDsluCounter, 1413 mSDsCounter, 0 mSdLazyCounter, 819 mSolverCounterSat, 84 mSolverCounterUnsat, 6 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 27.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 312 SdHoareTripleChecker+Valid, 1669 SdHoareTripleChecker+Invalid, 909 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 84 IncrementalHoareTripleChecker+Valid, 819 IncrementalHoareTripleChecker+Invalid, 6 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 27.9s IncrementalHoareTripleChecker+Time [2024-11-01 11:01:02,170 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [312 Valid, 1669 Invalid, 909 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [84 Valid, 819 Invalid, 6 Unknown, 0 Unchecked, 27.9s Time] [2024-11-01 11:01:02,171 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 467 states. [2024-11-01 11:01:02,199 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 467 to 451. [2024-11-01 11:01:02,200 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 451 states, 327 states have (on average 1.2660550458715596) internal successors, (414), 334 states have internal predecessors, (414), 88 states have call successors, (88), 34 states have call predecessors, (88), 35 states have return successors, (94), 88 states have call predecessors, (94), 88 states have call successors, (94) [2024-11-01 11:01:02,202 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 451 states to 451 states and 596 transitions. [2024-11-01 11:01:02,202 INFO L78 Accepts]: Start accepts. Automaton has 451 states and 596 transitions. Word has length 97 [2024-11-01 11:01:02,203 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-01 11:01:02,203 INFO L471 AbstractCegarLoop]: Abstraction has 451 states and 596 transitions. [2024-11-01 11:01:02,203 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 9 states have (on average 7.666666666666667) internal successors, (69), 8 states have internal predecessors, (69), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (8), 2 states have call predecessors, (8), 3 states have call successors, (8) [2024-11-01 11:01:02,203 INFO L276 IsEmpty]: Start isEmpty. Operand 451 states and 596 transitions. [2024-11-01 11:01:02,209 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2024-11-01 11:01:02,210 INFO L207 NwaCegarLoop]: Found error trace [2024-11-01 11:01:02,210 INFO L215 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-01 11:01:02,216 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc5 --incremental --print-success --lang smt (3)] Ended with exit code 0 [2024-11-01 11:01:02,412 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc5 --incremental --print-success --lang smt [2024-11-01 11:01:02,413 INFO L396 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_device_create_fileErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_device_create_fileErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-01 11:01:02,413 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-01 11:01:02,413 INFO L85 PathProgramCache]: Analyzing trace with hash -1735581115, now seen corresponding path program 1 times [2024-11-01 11:01:02,413 INFO L118 FreeRefinementEngine]: Executing refinement strategy FIXED_PREFERENCES [2024-11-01 11:01:02,414 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModulePreferences [112287516] [2024-11-01 11:01:02,414 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-01 11:01:02,414 INFO L173 SolverBuilder]: Constructing external solver with command: cvc5 --incremental --print-success --lang smt [2024-11-01 11:01:02,414 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc5 [2024-11-01 11:01:02,417 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc5 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2024-11-01 11:01:02,417 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc5 --incremental --print-success --lang smt (4)] Waiting until timeout for monitored process [2024-11-01 11:01:02,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-01 11:01:02,714 WARN L253 TraceCheckSpWp]: Trace formula consists of 537 conjuncts, 388 conjuncts are in the unsatisfiable core [2024-11-01 11:01:02,741 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-01 11:01:03,264 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2024-11-01 11:01:03,270 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2024-11-01 11:01:03,320 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2024-11-01 11:01:03,343 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2024-11-01 11:01:04,048 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2024-11-01 11:01:04,059 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2024-11-01 11:01:04,299 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2024-11-01 11:01:04,318 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2024-11-01 11:01:05,223 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2024-11-01 11:01:05,280 INFO L349 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2024-11-01 11:01:05,281 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2024-11-01 11:01:06,354 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 32 proven. 2 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-01 11:01:06,355 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-11-01 11:01:08,324 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 50 trivial. 0 not checked. [2024-11-01 11:01:08,325 INFO L136 FreeRefinementEngine]: Strategy FIXED_PREFERENCES found an infeasible trace [2024-11-01 11:01:08,325 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModulePreferences [112287516] [2024-11-01 11:01:08,325 INFO L158 FreeRefinementEngine]: IpTcStrategyModulePreferences [112287516] provided 1 perfect and 1 imperfect interpolant sequences [2024-11-01 11:01:08,325 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-11-01 11:01:08,325 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [21] total 25 [2024-11-01 11:01:08,325 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [678177080] [2024-11-01 11:01:08,325 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-01 11:01:08,326 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-11-01 11:01:08,326 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy FIXED_PREFERENCES [2024-11-01 11:01:08,326 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-01 11:01:08,327 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=78, Invalid=522, Unknown=0, NotChecked=0, Total=600 [2024-11-01 11:01:08,327 INFO L87 Difference]: Start difference. First operand 451 states and 596 transitions. Second operand has 5 states, 5 states have (on average 13.4) internal successors, (67), 5 states have internal predecessors, (67), 2 states have call successors, (13), 2 states have call predecessors, (13), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2024-11-01 11:01:08,487 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-01 11:01:08,487 INFO L93 Difference]: Finished difference Result 905 states and 1200 transitions. [2024-11-01 11:01:08,488 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-01 11:01:08,488 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.4) internal successors, (67), 5 states have internal predecessors, (67), 2 states have call successors, (13), 2 states have call predecessors, (13), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 117 [2024-11-01 11:01:08,488 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-01 11:01:08,491 INFO L225 Difference]: With dead ends: 905 [2024-11-01 11:01:08,491 INFO L226 Difference]: Without dead ends: 457 [2024-11-01 11:01:08,493 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 232 GetRequests, 208 SyntacticMatches, 1 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 126 ImplicationChecksByTransitivity, 2.1s TimeCoverageRelationStatistics Valid=78, Invalid=522, Unknown=0, NotChecked=0, Total=600 [2024-11-01 11:01:08,494 INFO L432 NwaCegarLoop]: 271 mSDtfsCounter, 0 mSDsluCounter, 798 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 1069 SdHoareTripleChecker+Invalid, 26 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-01 11:01:08,495 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 1069 Invalid, 26 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-01 11:01:08,497 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 457 states. [2024-11-01 11:01:08,530 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 457 to 457. [2024-11-01 11:01:08,532 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 457 states, 333 states have (on average 1.2612612612612613) internal successors, (420), 340 states have internal predecessors, (420), 88 states have call successors, (88), 34 states have call predecessors, (88), 35 states have return successors, (94), 88 states have call predecessors, (94), 88 states have call successors, (94) [2024-11-01 11:01:08,534 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 457 states to 457 states and 602 transitions. [2024-11-01 11:01:08,534 INFO L78 Accepts]: Start accepts. Automaton has 457 states and 602 transitions. Word has length 117 [2024-11-01 11:01:08,534 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-01 11:01:08,535 INFO L471 AbstractCegarLoop]: Abstraction has 457 states and 602 transitions. [2024-11-01 11:01:08,535 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.4) internal successors, (67), 5 states have internal predecessors, (67), 2 states have call successors, (13), 2 states have call predecessors, (13), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2024-11-01 11:01:08,535 INFO L276 IsEmpty]: Start isEmpty. Operand 457 states and 602 transitions. [2024-11-01 11:01:08,536 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 143 [2024-11-01 11:01:08,536 INFO L207 NwaCegarLoop]: Found error trace [2024-11-01 11:01:08,536 INFO L215 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-01 11:01:08,543 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc5 --incremental --print-success --lang smt (4)] Ended with exit code 0 [2024-11-01 11:01:08,739 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc5 --incremental --print-success --lang smt [2024-11-01 11:01:08,739 INFO L396 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_device_create_fileErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_device_create_fileErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-01 11:01:08,740 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-01 11:01:08,740 INFO L85 PathProgramCache]: Analyzing trace with hash 1373940528, now seen corresponding path program 1 times [2024-11-01 11:01:08,740 INFO L118 FreeRefinementEngine]: Executing refinement strategy FIXED_PREFERENCES [2024-11-01 11:01:08,740 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModulePreferences [1235378822] [2024-11-01 11:01:08,740 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-01 11:01:08,741 INFO L173 SolverBuilder]: Constructing external solver with command: cvc5 --incremental --print-success --lang smt [2024-11-01 11:01:08,741 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc5 [2024-11-01 11:01:08,743 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc5 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2024-11-01 11:01:08,744 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc5 --incremental --print-success --lang smt (5)] Waiting until timeout for monitored process [2024-11-01 11:01:09,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-01 11:01:09,161 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-01 11:01:09,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-01 11:01:09,599 INFO L130 FreeRefinementEngine]: Strategy FIXED_PREFERENCES found a feasible trace [2024-11-01 11:01:09,599 INFO L325 BasicCegarLoop]: Counterexample is feasible [2024-11-01 11:01:09,600 INFO L782 garLoopResultBuilder]: Registering result UNSAFE for location ldv_device_create_fileErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2024-11-01 11:01:09,609 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc5 --incremental --print-success --lang smt (5)] Ended with exit code 0 [2024-11-01 11:01:09,805 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc5 --incremental --print-success --lang smt [2024-11-01 11:01:09,809 INFO L407 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1] [2024-11-01 11:01:09,907 INFO L170 ceAbstractionStarter]: Computing trace abstraction results [2024-11-01 11:01:09,909 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 01.11 11:01:09 BoogieIcfgContainer [2024-11-01 11:01:09,909 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2024-11-01 11:01:09,910 INFO L158 Benchmark]: Toolchain (without parser) took 45593.77ms. Allocated memory was 218.1MB in the beginning and 276.8MB in the end (delta: 58.7MB). Free memory was 192.5MB in the beginning and 92.8MB in the end (delta: 99.7MB). Peak memory consumption was 159.0MB. Max. memory is 8.0GB. [2024-11-01 11:01:09,910 INFO L158 Benchmark]: CDTParser took 0.12ms. Allocated memory is still 218.1MB. Free memory is still 195.4MB. There was no memory consumed. Max. memory is 8.0GB. [2024-11-01 11:01:09,910 INFO L158 Benchmark]: CACSL2BoogieTranslator took 572.32ms. Allocated memory is still 218.1MB. Free memory was 192.0MB in the beginning and 156.3MB in the end (delta: 35.7MB). Peak memory consumption was 35.7MB. Max. memory is 8.0GB. [2024-11-01 11:01:09,910 INFO L158 Benchmark]: Boogie Procedure Inliner took 76.51ms. Allocated memory is still 218.1MB. Free memory was 156.3MB in the beginning and 152.1MB in the end (delta: 4.2MB). Peak memory consumption was 4.2MB. Max. memory is 8.0GB. [2024-11-01 11:01:09,910 INFO L158 Benchmark]: Boogie Preprocessor took 121.51ms. Allocated memory is still 218.1MB. Free memory was 152.1MB in the beginning and 142.2MB in the end (delta: 10.0MB). Peak memory consumption was 10.5MB. Max. memory is 8.0GB. [2024-11-01 11:01:09,911 INFO L158 Benchmark]: RCFGBuilder took 5240.99ms. Allocated memory was 218.1MB in the beginning and 276.8MB in the end (delta: 58.7MB). Free memory was 142.2MB in the beginning and 215.8MB in the end (delta: -73.7MB). Peak memory consumption was 40.6MB. Max. memory is 8.0GB. [2024-11-01 11:01:09,911 INFO L158 Benchmark]: TraceAbstraction took 39577.41ms. Allocated memory is still 276.8MB. Free memory was 214.8MB in the beginning and 92.8MB in the end (delta: 122.0MB). Peak memory consumption was 122.6MB. Max. memory is 8.0GB. [2024-11-01 11:01:09,916 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.12ms. Allocated memory is still 218.1MB. Free memory is still 195.4MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 572.32ms. Allocated memory is still 218.1MB. Free memory was 192.0MB in the beginning and 156.3MB in the end (delta: 35.7MB). Peak memory consumption was 35.7MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 76.51ms. Allocated memory is still 218.1MB. Free memory was 156.3MB in the beginning and 152.1MB in the end (delta: 4.2MB). Peak memory consumption was 4.2MB. Max. memory is 8.0GB. * Boogie Preprocessor took 121.51ms. Allocated memory is still 218.1MB. Free memory was 152.1MB in the beginning and 142.2MB in the end (delta: 10.0MB). Peak memory consumption was 10.5MB. Max. memory is 8.0GB. * RCFGBuilder took 5240.99ms. Allocated memory was 218.1MB in the beginning and 276.8MB in the end (delta: 58.7MB). Free memory was 142.2MB in the beginning and 215.8MB in the end (delta: -73.7MB). Peak memory consumption was 40.6MB. Max. memory is 8.0GB. * TraceAbstraction took 39577.41ms. Allocated memory is still 276.8MB. Free memory was 214.8MB in the beginning and 92.8MB in the end (delta: 122.0MB). Peak memory consumption was 122.6MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 1368]: Unable to prove that a call to reach_error is unreachable Unable to prove that a call to reach_error is unreachable Reason: overapproximation of large string literal at line 1069. Possible FailurePath: [L883] int LDV_IN_INTERRUPT = 1; [L884] int ref_cnt ; [L885] int ldv_state_variable_1 ; [L886] struct platform_device *s3c_hwmon_driver_group1 ; [L887] int probed_1 = 0; [L888] int ldv_state_variable_0 ; [L1174-L1176] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1174-L1176] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1174-L1176] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1174-L1176] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1174-L1176] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1174-L1176] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1174-L1176] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1174-L1176] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1174-L1176] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1174-L1176] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1174-L1176] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1174-L1176] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1174-L1176] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1174-L1176] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1174-L1176] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1174-L1176] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1174-L1176] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1174-L1176] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1174-L1176] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1174-L1176] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1174-L1176] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1174-L1176] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1174-L1176] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1192] int ldv_retval_0 ; [L1193] int ldv_retval_1 ; [L1196] int ldv_retval_2 ; [L1421] int ldv_count_1 = 0; [L1422] int ldv_count_2 = 0; VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={0:0}] [L1222] int tmp ; [L1223] int tmp___0 ; [L1224] int tmp___1 ; [L1226] FCALL ldv_initialize() [L1227] ldv_state_variable_1 = 0 [L1228] ref_cnt = 0 [L1229] ldv_state_variable_0 = 1 VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=0, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={0:0}] [L1231] tmp = __VERIFIER_nondet_int() [L1233] case 0: [L1278] case 1: [L1280] tmp___1 = __VERIFIER_nondet_int() [L1282] case 0: VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=0, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={0:0}, tmp___1=1] [L1278] case 1: [L1290] case 1: VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=0, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={0:0}] [L1278] case 1: [L1292] CALL, EXPR s3c_hwmon_init() [L1179] int tmp ; [L1181] CALL, EXPR platform_driver_register(& s3c_hwmon_driver) [L1497] return __VERIFIER_nondet_int(); [L1181] RET, EXPR platform_driver_register(& s3c_hwmon_driver) [L1181] tmp = platform_driver_register(& s3c_hwmon_driver) [L1182] return (tmp); VAL [LDV_IN_INTERRUPT=1, \result=0, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=0, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={0:0}] [L1292] RET, EXPR s3c_hwmon_init() [L1292] ldv_retval_2 = s3c_hwmon_init() [L1278] case 1: [L1299] ldv_state_variable_0 = 2 [L1300] ldv_state_variable_1 = 1 [L1301] CALL ldv_platform_driver_init_1() [L1212] void *tmp ; VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={0:0}] [L1214] CALL, EXPR ldv_malloc(624U) VAL [LDV_IN_INTERRUPT=1, \old(size)=624, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={0:0}] [L807] void *p ; [L808] void *tmp ; [L809] int tmp___0 ; [L811] tmp___0 = __VERIFIER_nondet_int() [L812] COND FALSE !(tmp___0 != 0) [L815] tmp = malloc(size) [L816] p = tmp VAL [LDV_IN_INTERRUPT=1, \old(size)=624, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, p={1949:0}, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={0:0}] [L817] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [LDV_IN_INTERRUPT=1, \old(cond)=1, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={0:0}] [L801] COND FALSE !(!cond) VAL [LDV_IN_INTERRUPT=1, \old(cond)=1, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={0:0}] [L817] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [LDV_IN_INTERRUPT=1, \old(size)=624, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, p={1949:0}, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={0:0}] [L818] CALL, EXPR IS_ERR(p) VAL [LDV_IN_INTERRUPT=1, \old(ptr)={1949:0}, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={0:0}] [L1334] bool tmp ; VAL [LDV_IN_INTERRUPT=1, \old(ptr)={1949:0}, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ptr={1949:0}, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={0:0}] [L1336] CALL, EXPR ldv_is_err(ptr) VAL [LDV_IN_INTERRUPT=1, \old(ptr)={1949:0}, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={0:0}] [L1388] return ((unsigned long )ptr > 2012UL); VAL [LDV_IN_INTERRUPT=1, \old(ptr)={1949:0}, \result=0, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={0:0}] [L1336] RET, EXPR ldv_is_err(ptr) VAL [LDV_IN_INTERRUPT=1, \old(ptr)={1949:0}, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ptr={1949:0}, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={0:0}] [L1336] tmp = ldv_is_err(ptr) [L1337] return ((long )tmp); VAL [LDV_IN_INTERRUPT=1, \old(ptr)={1949:0}, \result=0, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ptr={1949:0}, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={0:0}] [L818] RET, EXPR IS_ERR(p) VAL [LDV_IN_INTERRUPT=1, \old(size)=624, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, p={1949:0}, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={0:0}] [L818] CALL assume_abort_if_not(IS_ERR(p) == 0) VAL [LDV_IN_INTERRUPT=1, \old(cond)=1, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={0:0}] [L801] COND FALSE !(!cond) VAL [LDV_IN_INTERRUPT=1, \old(cond)=1, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={0:0}] [L818] RET assume_abort_if_not(IS_ERR(p) == 0) VAL [LDV_IN_INTERRUPT=1, \old(size)=624, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, p={1949:0}, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={0:0}] [L819] return (p); VAL [LDV_IN_INTERRUPT=1, \old(size)=624, \result={1949:0}, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={0:0}] [L1214] RET, EXPR ldv_malloc(624U) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={0:0}] [L1214] tmp = ldv_malloc(624U) [L1215] CALL assume_abort_if_not((unsigned long )tmp != (unsigned long )((void *)0)) VAL [LDV_IN_INTERRUPT=1, \old(cond)=1, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={0:0}] [L801] COND FALSE !(!cond) VAL [LDV_IN_INTERRUPT=1, \old(cond)=1, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={0:0}] [L1215] RET assume_abort_if_not((unsigned long )tmp != (unsigned long )((void *)0)) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={0:0}, tmp={1949:0}] [L1216] s3c_hwmon_driver_group1 = (struct platform_device *)tmp VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1301] RET ldv_platform_driver_init_1() [L1231] tmp = __VERIFIER_nondet_int() [L1233] case 0: [L1235] tmp___0 = __VERIFIER_nondet_int() [L1237] case 0: VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}, tmp=0, tmp___0=0] [L1233] case 0: VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}, tmp=0, tmp___0=0] [L1239] CALL s3c_hwmon_probe(s3c_hwmon_driver_group1) VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1042] struct s3c_hwmon_pdata *pdata ; [L1043] struct s3c_hwmon *hwmon ; [L1044] int ret ; [L1045] int i ; [L1046] void *tmp ; [L1047] struct lock_class_key __key ; [L1048] long tmp___0 ; [L1049] long tmp___1 ; [L1050] long tmp___2 ; [L1051] long tmp___3 ; [L1052] struct s3c_hwmon_chcfg *cfg ; [L1054] EXPR dev->dev.platform_data [L1054] pdata = (struct s3c_hwmon_pdata *)dev->dev.platform_data [L1055] ret = 0 VAL [LDV_IN_INTERRUPT=1, \old(dev)={1949:0}, \old(ldv_count_2)=0, __key={2014:0}, __this_module={0:0}, dev={1949:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, pdata={2012:212}, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1056] COND FALSE !((unsigned long )pdata == (unsigned long )((struct s3c_hwmon_pdata *)0)) [L1061] CALL, EXPR ldv_kzalloc_9(800U, 208U) [L1358] void *tmp ; [L1360] CALL, EXPR ldv_zalloc(size) [L825] void *p ; [L826] void *tmp ; [L827] int tmp___0 ; [L829] tmp___0 = __VERIFIER_nondet_int() [L830] COND FALSE !(tmp___0 != 0) [L833] EXPR, FCALL calloc(1U, size) VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}, size=800] [L833] tmp = calloc(1U, size) [L834] p = tmp VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, p={2012:0}, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}, size=800] [L835] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [LDV_IN_INTERRUPT=1, \old(cond)=1, \old(ldv_count_2)=0, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L801] COND FALSE !(!cond) VAL [LDV_IN_INTERRUPT=1, \old(cond)=1, \old(ldv_count_2)=0, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L835] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, p={2012:0}, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}, size=800] [L836] CALL, EXPR IS_ERR(p) VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, \old(ptr)={2012:0}, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1334] bool tmp ; VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, \old(ptr)={2012:0}, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ptr={2012:0}, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1336] CALL, EXPR ldv_is_err(ptr) VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, \old(ptr)={2012:0}, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1388] return ((unsigned long )ptr > 2012UL); VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, \old(ptr)={2012:0}, \result=0, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1336] RET, EXPR ldv_is_err(ptr) VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, \old(ptr)={2012:0}, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ptr={2012:0}, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1336] tmp = ldv_is_err(ptr) [L1337] return ((long )tmp); VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, \old(ptr)={2012:0}, \result=0, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ptr={2012:0}, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L836] RET, EXPR IS_ERR(p) VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, p={2012:0}, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}, size=800] [L836] CALL assume_abort_if_not(IS_ERR(p) == 0) VAL [LDV_IN_INTERRUPT=1, \old(cond)=1, \old(ldv_count_2)=0, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L801] COND FALSE !(!cond) VAL [LDV_IN_INTERRUPT=1, \old(cond)=1, \old(ldv_count_2)=0, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L836] RET assume_abort_if_not(IS_ERR(p) == 0) VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, p={2012:0}, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}, size=800] [L837] return (p); VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, \result={2012:0}, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}, size=800] [L1360] RET, EXPR ldv_zalloc(size) [L1360] tmp = ldv_zalloc(size) [L1361] return (tmp); VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, \result={2012:0}, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1061] RET, EXPR ldv_kzalloc_9(800U, 208U) [L1061] tmp = ldv_kzalloc_9(800U, 208U) [L1062] hwmon = (struct s3c_hwmon *)tmp VAL [LDV_IN_INTERRUPT=1, \old(dev)={1949:0}, \old(ldv_count_2)=0, __key={2014:0}, __this_module={0:0}, dev={1949:0}, hwmon={2012:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, pdata={2012:212}, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1063] COND FALSE !((unsigned long )hwmon == (unsigned long )((struct s3c_hwmon *)0)) [L1068] CALL platform_set_drvdata(dev, (void *)hwmon) [L906] FCALL dev_set_drvdata(& pdev->dev, data) [L1068] RET platform_set_drvdata(dev, (void *)hwmon) [L1069] FCALL __mutex_init(& hwmon->lock, "&hwmon->lock", & __key) [L1070-L1072] CALL, EXPR s3c_adc_register(dev, (void (*)(struct s3c_adc_client * , unsigned int ))0, (void (*)(struct s3c_adc_client * , unsigned int , unsigned int , unsigned int * ))0, 0U) [L1507] CALL, EXPR ldv_malloc(0UL) VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, \old(size)=0, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L807] void *p ; [L808] void *tmp ; [L809] int tmp___0 ; [L811] tmp___0 = __VERIFIER_nondet_int() [L812] COND TRUE tmp___0 != 0 [L813] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, \old(size)=0, \result={0:0}, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}, size=0] [L1507] RET, EXPR ldv_malloc(0UL) VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1507] return ldv_malloc(0UL); [L1070-L1072] RET, EXPR s3c_adc_register(dev, (void (*)(struct s3c_adc_client * , unsigned int ))0, (void (*)(struct s3c_adc_client * , unsigned int , unsigned int , unsigned int * ))0, 0U) [L1070-L1072] hwmon->client = s3c_adc_register(dev, (void (*)(struct s3c_adc_client * , unsigned int ))0, (void (*)(struct s3c_adc_client * , unsigned int , unsigned int , unsigned int * ))0, 0U) [L1073] EXPR hwmon->client VAL [LDV_IN_INTERRUPT=1, \old(dev)={1949:0}, \old(ldv_count_2)=0, __this_module={0:0}, dev={1949:0}, hwmon={2012:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, pdata={2012:212}, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1073] CALL, EXPR IS_ERR((void const *)hwmon->client) VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, \old(ptr)={0:0}, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1334] bool tmp ; VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, \old(ptr)={0:0}, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1336] CALL, EXPR ldv_is_err(ptr) VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, \old(ptr)={0:0}, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1388] return ((unsigned long )ptr > 2012UL); VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, \old(ptr)={0:0}, \result=0, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1336] RET, EXPR ldv_is_err(ptr) VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, \old(ptr)={0:0}, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1336] tmp = ldv_is_err(ptr) [L1337] return ((long )tmp); VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, \old(ptr)={0:0}, \result=0, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1073] RET, EXPR IS_ERR((void const *)hwmon->client) VAL [LDV_IN_INTERRUPT=1, \old(dev)={1949:0}, \old(ldv_count_2)=0, __this_module={0:0}, dev={1949:0}, hwmon={2012:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, pdata={2012:212}, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1073] tmp___1 = IS_ERR((void const *)hwmon->client) [L1074] COND FALSE !(tmp___1 != 0L) [L1081] CALL, EXPR s3c_hwmon_add_raw(& dev->dev) [L937] return (0); VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, \result=0, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1081] RET, EXPR s3c_hwmon_add_raw(& dev->dev) [L1081] ret = s3c_hwmon_add_raw(& dev->dev) [L1082] COND FALSE !(ret != 0) [L1086] CALL, EXPR hwmon_device_register(& dev->dev) [L1480] CALL, EXPR ldv_malloc(sizeof(struct device)) VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, \old(size)=1003, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L807] void *p ; [L808] void *tmp ; [L809] int tmp___0 ; [L811] tmp___0 = __VERIFIER_nondet_int() [L812] COND TRUE tmp___0 != 0 [L813] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, \old(size)=1003, \result={0:0}, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}, size=1003] [L1480] RET, EXPR ldv_malloc(sizeof(struct device)) VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1480] return ldv_malloc(sizeof(struct device)); [L1086] RET, EXPR hwmon_device_register(& dev->dev) [L1086] hwmon->hwmon_dev = hwmon_device_register(& dev->dev) [L1087] EXPR hwmon->hwmon_dev VAL [LDV_IN_INTERRUPT=1, \old(dev)={1949:0}, \old(ldv_count_2)=0, __this_module={0:0}, dev={1949:0}, hwmon={2012:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, pdata={2012:212}, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1087] CALL, EXPR IS_ERR((void const *)hwmon->hwmon_dev) VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, \old(ptr)={0:0}, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1334] bool tmp ; VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, \old(ptr)={0:0}, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1336] CALL, EXPR ldv_is_err(ptr) VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, \old(ptr)={0:0}, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1388] return ((unsigned long )ptr > 2012UL); VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, \old(ptr)={0:0}, \result=0, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1336] RET, EXPR ldv_is_err(ptr) VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, \old(ptr)={0:0}, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1336] tmp = ldv_is_err(ptr) [L1337] return ((long )tmp); VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, \old(ptr)={0:0}, \result=0, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1087] RET, EXPR IS_ERR((void const *)hwmon->hwmon_dev) VAL [LDV_IN_INTERRUPT=1, \old(dev)={1949:0}, \old(ldv_count_2)=0, __this_module={0:0}, dev={1949:0}, hwmon={2012:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, pdata={2012:212}, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1087] tmp___3 = IS_ERR((void const *)hwmon->hwmon_dev) [L1088] COND FALSE !(tmp___3 != 0L) [L1095] i = 0 VAL [LDV_IN_INTERRUPT=1, \old(dev)={1949:0}, \old(ldv_count_2)=0, __this_module={0:0}, dev={1949:0}, hwmon={2012:0}, i=0, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, pdata={2012:212}, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1134] COND TRUE (unsigned int )i <= 7U VAL [LDV_IN_INTERRUPT=1, \old(dev)={1949:0}, \old(ldv_count_2)=0, __this_module={0:0}, dev={1949:0}, hwmon={2012:0}, i=0, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, pdata={2012:212}, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1098] EXPR pdata->in[i] [L1098] cfg = pdata->in[i] VAL [LDV_IN_INTERRUPT=1, \old(dev)={1949:0}, \old(ldv_count_2)=0, __this_module={0:0}, cfg={2012:140}, dev={1949:0}, hwmon={2012:0}, i=0, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, pdata={2012:212}, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1099] COND FALSE !((unsigned long )cfg == (unsigned long )((struct s3c_hwmon_chcfg *)0)) [L1103] EXPR cfg->mult VAL [LDV_IN_INTERRUPT=1, \old(dev)={1949:0}, \old(ldv_count_2)=0, __this_module={0:0}, cfg={2012:140}, dev={1949:0}, hwmon={2012:0}, i=0, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, pdata={2012:212}, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1103] COND FALSE !(cfg->mult > 65535U) [L1108] EXPR cfg->div VAL [LDV_IN_INTERRUPT=1, \old(dev)={1949:0}, \old(ldv_count_2)=0, __this_module={0:0}, dev={1949:0}, hwmon={2012:0}, i=0, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, pdata={2012:212}, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1108] COND FALSE !(cfg->div == 0U) [L1113] EXPR pdata->in[i] [L1113-L1114] CALL s3c_hwmon_create_attr(& dev->dev, pdata->in[i], (struct s3c_hwmon_attr *)(& hwmon->attrs) + (unsigned int )i, i) [L999] struct sensor_device_attribute *attr ; [L1000] int ret ; [L1003] attr = & attrs->in [L1004] attr->index = channel [L1005] attr->dev_attr.attr.name = (char const *)(& attrs->in_name) [L1006] attr->dev_attr.attr.mode = 292U [L1007] attr->dev_attr.show = & s3c_hwmon_ch_show [L1008] CALL ldv_device_create_file_7(dev, (struct device_attribute const *)(& attr->dev_attr)) [L1342] int tmp ; VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1344] CALL ldv_device_create_file() VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1432] int nondetermined ; [L1433] int tmp ; VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1435] CALL, EXPR ldv_undef_int() VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L862] int tmp ; [L864] tmp = __VERIFIER_nondet_int() [L865] return (tmp); VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, \result=-1, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1435] RET, EXPR ldv_undef_int() VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, __this_module={0:0}, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1435] nondetermined = ldv_undef_int() [L1436] COND TRUE nondetermined != 0 [L1437] ldv_count_2 = ldv_count_2 + 1 VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, __this_module={0:0}, ldv_count_1=0, ldv_count_2=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] [L1438] COND TRUE ldv_count_1 < ldv_count_2 [L1439] CALL ldv_error() [L1368] reach_error() VAL [LDV_IN_INTERRUPT=1, \old(ldv_count_2)=0, __this_module={0:0}, ldv_count_1=0, ldv_count_2=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group1={1949:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 19 procedures, 225 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 39.4s, OverallIterations: 4, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 28.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 6 mSolverCounterUnknown, 347 SdHoareTripleChecker+Valid, 28.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 313 mSDsluCounter, 3304 SdHoareTripleChecker+Invalid, 27.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2487 mSDsCounter, 86 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 857 IncrementalHoareTripleChecker+Invalid, 949 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 86 mSolverCounterUnsat, 817 mSDtfsCounter, 857 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 574 GetRequests, 530 SyntacticMatches, 1 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 194 ImplicationChecksByTransitivity, 2.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=457occurred in iteration=3, InterpolantAutomatonStates: 17, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 3 MinimizatonAttempts, 16 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 7.6s InterpolantComputationTime, 429 NumberOfCodeBlocks, 429 NumberOfCodeBlocksAsserted, 4 NumberOfCheckSat, 568 ConstructedInterpolants, 4 QuantifiedInterpolants, 1562 SizeOfPredicates, 72 NumberOfNonLiveVariables, 1479 ConjunctsInSsa, 754 ConjunctsInUnsatCore, 6 InterpolantComputations, 4 PerfectInterpolantSequences, 162/168 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2024-11-01 11:01:09,983 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request...