/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data -tc ../../../trunk/examples/toolchains/AutomizerCInline.xml --traceabstraction.trace.refinement.strategy FIXED_PREFERENCES --cacsl2boogietranslator.allow.undefined.functions true --traceabstraction.smt.solver External_ModelsAndUnsatCoreMode --traceabstraction.command.for.external.solver 'mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3' -s ../../../trunk/examples/settings/default/automizer/svcomp-Reach-64bit-Automizer_Bitvector.epf -i ../../../trunk/examples/svcomp/ldv-commit-tester/m0_drivers-hwmon-s3c-hwmon-ko--130_7a--af3071a-1.i -------------------------------------------------------------------------------- This is Ultimate 0.2.5-dev-356b6ba-m [2024-11-01 14:52:24,543 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-11-01 14:52:24,657 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Reach-64bit-Automizer_Bitvector.epf [2024-11-01 14:52:24,665 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-11-01 14:52:24,666 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-11-01 14:52:24,705 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-11-01 14:52:24,706 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-11-01 14:52:24,706 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-11-01 14:52:24,707 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-11-01 14:52:24,707 INFO L153 SettingsManager]: * Use memory slicer=true [2024-11-01 14:52:24,708 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-11-01 14:52:24,708 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-11-01 14:52:24,709 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-11-01 14:52:24,710 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-11-01 14:52:24,711 INFO L153 SettingsManager]: * Use SBE=true [2024-11-01 14:52:24,711 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-11-01 14:52:24,711 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-11-01 14:52:24,712 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-11-01 14:52:24,712 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-11-01 14:52:24,712 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-11-01 14:52:24,713 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-11-01 14:52:24,713 INFO L153 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2024-11-01 14:52:24,713 INFO L153 SettingsManager]: * Use bitvectors instead of ints=true [2024-11-01 14:52:24,714 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-11-01 14:52:24,714 INFO L153 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2024-11-01 14:52:24,714 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-11-01 14:52:24,715 INFO L153 SettingsManager]: * Use constant arrays=true [2024-11-01 14:52:24,715 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-11-01 14:52:24,715 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-01 14:52:24,716 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-11-01 14:52:24,716 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-11-01 14:52:24,716 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-11-01 14:52:24,717 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-11-01 14:52:24,717 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-11-01 14:52:24,717 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-11-01 14:52:24,717 INFO L153 SettingsManager]: * Trace refinement strategy=WOLF [2024-11-01 14:52:24,718 INFO L153 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2024-11-01 14:52:24,718 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-11-01 14:52:24,718 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-11-01 14:52:24,718 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-11-01 14:52:24,719 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-11-01 14:52:24,719 INFO L153 SettingsManager]: * Logic for external solver=AUFBV [2024-11-01 14:52:24,719 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: Trace refinement strategy -> FIXED_PREFERENCES Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Allow undefined functions -> true Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: SMT solver -> External_ModelsAndUnsatCoreMode Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: Command for external solver -> mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2024-11-01 14:52:25,095 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-11-01 14:52:25,123 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-11-01 14:52:25,130 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-11-01 14:52:25,131 INFO L270 PluginConnector]: Initializing CDTParser... [2024-11-01 14:52:25,133 INFO L274 PluginConnector]: CDTParser initialized [2024-11-01 14:52:25,135 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/ldv-commit-tester/m0_drivers-hwmon-s3c-hwmon-ko--130_7a--af3071a-1.i [2024-11-01 14:52:26,815 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-11-01 14:52:27,180 INFO L384 CDTParser]: Found 1 translation units. [2024-11-01 14:52:27,181 INFO L180 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/ldv-commit-tester/m0_drivers-hwmon-s3c-hwmon-ko--130_7a--af3071a-1.i [2024-11-01 14:52:27,205 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/234e38dfc/9247d115baee4ce7a1f3338b2dff3fab/FLAG09da68067 [2024-11-01 14:52:27,222 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/234e38dfc/9247d115baee4ce7a1f3338b2dff3fab [2024-11-01 14:52:27,225 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-11-01 14:52:27,226 INFO L133 ToolchainWalker]: Walking toolchain with 5 elements. [2024-11-01 14:52:27,228 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-11-01 14:52:27,228 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-11-01 14:52:27,234 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-11-01 14:52:27,234 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 01.11 02:52:27" (1/1) ... [2024-11-01 14:52:27,235 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@395f8519 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 01.11 02:52:27, skipping insertion in model container [2024-11-01 14:52:27,235 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 01.11 02:52:27" (1/1) ... [2024-11-01 14:52:27,293 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-11-01 14:52:27,637 WARN L1053 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-01 14:52:27,640 WARN L1053 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-01 14:52:27,652 WARN L1053 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-01 14:52:27,672 WARN L1053 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-01 14:52:27,673 WARN L1053 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-01 14:52:27,674 WARN L1053 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-01 14:52:27,675 WARN L1053 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-01 14:52:27,676 WARN L1053 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-01 14:52:27,677 WARN L1053 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-01 14:52:27,678 WARN L1053 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-01 14:52:27,684 WARN L1053 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-01 14:52:27,690 WARN L1053 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-01 14:52:27,717 WARN L251 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/ldv-commit-tester/m0_drivers-hwmon-s3c-hwmon-ko--130_7a--af3071a-1.i[36117,36130] [2024-11-01 14:52:27,740 WARN L1053 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-01 14:52:27,741 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-01 14:52:27,753 INFO L200 MainTranslator]: Completed pre-run [2024-11-01 14:52:27,838 WARN L251 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/ldv-commit-tester/m0_drivers-hwmon-s3c-hwmon-ko--130_7a--af3071a-1.i[36117,36130] [2024-11-01 14:52:27,845 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-01 14:52:27,881 INFO L204 MainTranslator]: Completed translation [2024-11-01 14:52:27,882 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 01.11 02:52:27 WrapperNode [2024-11-01 14:52:27,883 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-11-01 14:52:27,884 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-11-01 14:52:27,884 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-11-01 14:52:27,884 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-11-01 14:52:27,890 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 01.11 02:52:27" (1/1) ... [2024-11-01 14:52:27,920 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 01.11 02:52:27" (1/1) ... [2024-11-01 14:52:27,965 INFO L138 Inliner]: procedures = 78, calls = 161, calls flagged for inlining = 35, calls inlined = 30, statements flattened = 502 [2024-11-01 14:52:27,965 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-11-01 14:52:27,966 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-11-01 14:52:27,966 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-11-01 14:52:27,966 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-11-01 14:52:27,979 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 01.11 02:52:27" (1/1) ... [2024-11-01 14:52:27,980 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 01.11 02:52:27" (1/1) ... [2024-11-01 14:52:27,988 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 01.11 02:52:27" (1/1) ... [2024-11-01 14:52:28,044 INFO L175 MemorySlicer]: Split 54 memory accesses to 7 slices as follows [2, 3, 4, 20, 1, 2, 22]. 41 percent of accesses are in the largest equivalence class. The 6 initializations are split as follows [2, 0, 4, 0, 0, 0, 0]. The 34 writes are split as follows [0, 0, 0, 12, 0, 0, 22]. [2024-11-01 14:52:28,047 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 01.11 02:52:27" (1/1) ... [2024-11-01 14:52:28,048 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 01.11 02:52:27" (1/1) ... [2024-11-01 14:52:28,085 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 01.11 02:52:27" (1/1) ... [2024-11-01 14:52:28,091 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 01.11 02:52:27" (1/1) ... [2024-11-01 14:52:28,100 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 01.11 02:52:27" (1/1) ... [2024-11-01 14:52:28,110 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 01.11 02:52:27" (1/1) ... [2024-11-01 14:52:28,122 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-11-01 14:52:28,127 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-11-01 14:52:28,127 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-11-01 14:52:28,127 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-11-01 14:52:28,128 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 01.11 02:52:27" (1/1) ... [2024-11-01 14:52:28,133 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-11-01 14:52:28,144 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-01 14:52:28,161 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-11-01 14:52:28,164 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-11-01 14:52:28,190 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_hwmon_remove_raw [2024-11-01 14:52:28,190 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_hwmon_remove_raw [2024-11-01 14:52:28,190 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-11-01 14:52:28,190 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2024-11-01 14:52:28,190 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#0 [2024-11-01 14:52:28,191 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#1 [2024-11-01 14:52:28,191 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#2 [2024-11-01 14:52:28,191 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#3 [2024-11-01 14:52:28,191 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#4 [2024-11-01 14:52:28,191 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#5 [2024-11-01 14:52:28,191 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#6 [2024-11-01 14:52:28,191 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4#0 [2024-11-01 14:52:28,191 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4#1 [2024-11-01 14:52:28,192 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4#2 [2024-11-01 14:52:28,192 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4#3 [2024-11-01 14:52:28,192 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4#4 [2024-11-01 14:52:28,194 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4#5 [2024-11-01 14:52:28,194 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4#6 [2024-11-01 14:52:28,195 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#0 [2024-11-01 14:52:28,195 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#1 [2024-11-01 14:52:28,195 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#2 [2024-11-01 14:52:28,195 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#3 [2024-11-01 14:52:28,195 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#4 [2024-11-01 14:52:28,195 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#5 [2024-11-01 14:52:28,195 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#6 [2024-11-01 14:52:28,195 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#0 [2024-11-01 14:52:28,196 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#1 [2024-11-01 14:52:28,196 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#2 [2024-11-01 14:52:28,196 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#3 [2024-11-01 14:52:28,196 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#4 [2024-11-01 14:52:28,196 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#5 [2024-11-01 14:52:28,196 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#6 [2024-11-01 14:52:28,196 INFO L130 BoogieDeclarations]: Found specification of procedure PTR_ERR [2024-11-01 14:52:28,196 INFO L138 BoogieDeclarations]: Found implementation of procedure PTR_ERR [2024-11-01 14:52:28,197 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err [2024-11-01 14:52:28,197 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err [2024-11-01 14:52:28,197 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2024-11-01 14:52:28,197 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2024-11-01 14:52:28,197 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1#0 [2024-11-01 14:52:28,197 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1#1 [2024-11-01 14:52:28,197 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1#2 [2024-11-01 14:52:28,198 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1#3 [2024-11-01 14:52:28,198 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1#4 [2024-11-01 14:52:28,198 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1#5 [2024-11-01 14:52:28,198 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1#6 [2024-11-01 14:52:28,202 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_hwmon_remove_attr [2024-11-01 14:52:28,202 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_hwmon_remove_attr [2024-11-01 14:52:28,202 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2024-11-01 14:52:28,203 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4#0 [2024-11-01 14:52:28,203 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4#1 [2024-11-01 14:52:28,203 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4#2 [2024-11-01 14:52:28,203 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4#3 [2024-11-01 14:52:28,203 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4#4 [2024-11-01 14:52:28,204 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4#5 [2024-11-01 14:52:28,204 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4#6 [2024-11-01 14:52:28,204 INFO L130 BoogieDeclarations]: Found specification of procedure platform_get_drvdata [2024-11-01 14:52:28,204 INFO L138 BoogieDeclarations]: Found implementation of procedure platform_get_drvdata [2024-11-01 14:52:28,204 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_device_create_file_dev_attr_of_sensor_device_attribute [2024-11-01 14:52:28,204 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_device_create_file_dev_attr_of_sensor_device_attribute [2024-11-01 14:52:28,204 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1#0 [2024-11-01 14:52:28,204 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1#1 [2024-11-01 14:52:28,205 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1#2 [2024-11-01 14:52:28,205 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1#3 [2024-11-01 14:52:28,205 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1#4 [2024-11-01 14:52:28,205 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1#5 [2024-11-01 14:52:28,207 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1#6 [2024-11-01 14:52:28,207 INFO L130 BoogieDeclarations]: Found specification of procedure hwmon_device_unregister [2024-11-01 14:52:28,207 INFO L138 BoogieDeclarations]: Found implementation of procedure hwmon_device_unregister [2024-11-01 14:52:28,207 INFO L130 BoogieDeclarations]: Found specification of procedure dev_err [2024-11-01 14:52:28,207 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_err [2024-11-01 14:52:28,208 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_adc_release [2024-11-01 14:52:28,208 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_adc_release [2024-11-01 14:52:28,208 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1#0 [2024-11-01 14:52:28,208 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1#1 [2024-11-01 14:52:28,208 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1#2 [2024-11-01 14:52:28,208 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1#3 [2024-11-01 14:52:28,209 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1#4 [2024-11-01 14:52:28,209 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1#5 [2024-11-01 14:52:28,209 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1#6 [2024-11-01 14:52:28,209 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_handler_precall [2024-11-01 14:52:28,209 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_handler_precall [2024-11-01 14:52:28,209 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2024-11-01 14:52:28,209 INFO L130 BoogieDeclarations]: Found specification of procedure device_remove_file [2024-11-01 14:52:28,209 INFO L138 BoogieDeclarations]: Found implementation of procedure device_remove_file [2024-11-01 14:52:28,210 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-11-01 14:52:28,210 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-11-01 14:52:28,210 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2024-11-01 14:52:28,210 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2024-11-01 14:52:28,490 INFO L238 CfgBuilder]: Building ICFG [2024-11-01 14:52:28,493 INFO L264 CfgBuilder]: Building CFG for each procedure with an implementation [2024-11-01 14:52:33,949 INFO L? ?]: Removed 250 outVars from TransFormulas that were not future-live. [2024-11-01 14:52:33,950 INFO L287 CfgBuilder]: Performing block encoding [2024-11-01 14:52:33,970 INFO L311 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-11-01 14:52:33,971 INFO L316 CfgBuilder]: Removed 2 assume(true) statements. [2024-11-01 14:52:33,971 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 01.11 02:52:33 BoogieIcfgContainer [2024-11-01 14:52:33,971 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-11-01 14:52:33,974 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-11-01 14:52:33,974 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-11-01 14:52:33,977 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-11-01 14:52:33,977 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 01.11 02:52:27" (1/3) ... [2024-11-01 14:52:33,978 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@9370ea0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 01.11 02:52:33, skipping insertion in model container [2024-11-01 14:52:33,978 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 01.11 02:52:27" (2/3) ... [2024-11-01 14:52:33,979 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@9370ea0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 01.11 02:52:33, skipping insertion in model container [2024-11-01 14:52:33,979 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 01.11 02:52:33" (3/3) ... [2024-11-01 14:52:33,980 INFO L112 eAbstractionObserver]: Analyzing ICFG m0_drivers-hwmon-s3c-hwmon-ko--130_7a--af3071a-1.i [2024-11-01 14:52:33,996 INFO L214 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-11-01 14:52:33,996 INFO L154 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2024-11-01 14:52:34,071 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-11-01 14:52:34,077 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@142e86ed, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-11-01 14:52:34,077 INFO L334 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-11-01 14:52:34,084 INFO L276 IsEmpty]: Start isEmpty. Operand has 179 states, 129 states have (on average 1.2325581395348837) internal successors, (159), 133 states have internal predecessors, (159), 35 states have call successors, (35), 13 states have call predecessors, (35), 13 states have return successors, (35), 35 states have call predecessors, (35), 35 states have call successors, (35) [2024-11-01 14:52:34,095 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2024-11-01 14:52:34,095 INFO L207 NwaCegarLoop]: Found error trace [2024-11-01 14:52:34,096 INFO L215 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-01 14:52:34,097 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_device_create_file_dev_attr_of_sensor_device_attributeErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_device_create_file_dev_attr_of_sensor_device_attributeErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-01 14:52:34,101 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-01 14:52:34,102 INFO L85 PathProgramCache]: Analyzing trace with hash -1694392615, now seen corresponding path program 1 times [2024-11-01 14:52:34,110 INFO L118 FreeRefinementEngine]: Executing refinement strategy FIXED_PREFERENCES [2024-11-01 14:52:34,110 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModulePreferences [1132323012] [2024-11-01 14:52:34,111 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-01 14:52:34,114 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2024-11-01 14:52:34,114 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2024-11-01 14:52:34,117 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2024-11-01 14:52:34,119 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2024-11-01 14:52:34,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-01 14:52:34,617 INFO L255 TraceCheckSpWp]: Trace formula consists of 458 conjuncts, 19 conjuncts are in the unsatisfiable core [2024-11-01 14:52:34,629 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-01 14:52:34,952 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-11-01 14:52:34,952 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-11-01 14:52:35,393 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-01 14:52:35,394 INFO L136 FreeRefinementEngine]: Strategy FIXED_PREFERENCES found an infeasible trace [2024-11-01 14:52:35,394 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModulePreferences [1132323012] [2024-11-01 14:52:35,395 INFO L158 FreeRefinementEngine]: IpTcStrategyModulePreferences [1132323012] provided 1 perfect and 1 imperfect interpolant sequences [2024-11-01 14:52:35,395 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-11-01 14:52:35,395 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [8] total 14 [2024-11-01 14:52:35,397 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1069145603] [2024-11-01 14:52:35,397 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-01 14:52:35,401 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-11-01 14:52:35,401 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy FIXED_PREFERENCES [2024-11-01 14:52:35,419 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-11-01 14:52:35,420 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=31, Invalid=151, Unknown=0, NotChecked=0, Total=182 [2024-11-01 14:52:35,425 INFO L87 Difference]: Start difference. First operand has 179 states, 129 states have (on average 1.2325581395348837) internal successors, (159), 133 states have internal predecessors, (159), 35 states have call successors, (35), 13 states have call predecessors, (35), 13 states have return successors, (35), 35 states have call predecessors, (35), 35 states have call successors, (35) Second operand has 8 states, 8 states have (on average 6.75) internal successors, (54), 7 states have internal predecessors, (54), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2024-11-01 14:52:35,692 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-01 14:52:35,693 INFO L93 Difference]: Finished difference Result 356 states and 465 transitions. [2024-11-01 14:52:35,694 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-11-01 14:52:35,696 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.75) internal successors, (54), 7 states have internal predecessors, (54), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 79 [2024-11-01 14:52:35,696 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-01 14:52:35,706 INFO L225 Difference]: With dead ends: 356 [2024-11-01 14:52:35,706 INFO L226 Difference]: Without dead ends: 176 [2024-11-01 14:52:35,710 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 156 GetRequests, 144 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=31, Invalid=151, Unknown=0, NotChecked=0, Total=182 [2024-11-01 14:52:35,713 INFO L432 NwaCegarLoop]: 221 mSDtfsCounter, 0 mSDsluCounter, 1308 mSDsCounter, 0 mSdLazyCounter, 52 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 1529 SdHoareTripleChecker+Invalid, 52 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 52 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-11-01 14:52:35,713 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 1529 Invalid, 52 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 52 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-11-01 14:52:35,726 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 176 states. [2024-11-01 14:52:35,750 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 176 to 176. [2024-11-01 14:52:35,752 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 176 states, 127 states have (on average 1.1968503937007875) internal successors, (152), 130 states have internal predecessors, (152), 34 states have call successors, (34), 13 states have call predecessors, (34), 14 states have return successors, (38), 35 states have call predecessors, (38), 34 states have call successors, (38) [2024-11-01 14:52:35,755 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 176 states to 176 states and 224 transitions. [2024-11-01 14:52:35,756 INFO L78 Accepts]: Start accepts. Automaton has 176 states and 224 transitions. Word has length 79 [2024-11-01 14:52:35,757 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-01 14:52:35,757 INFO L471 AbstractCegarLoop]: Abstraction has 176 states and 224 transitions. [2024-11-01 14:52:35,757 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.75) internal successors, (54), 7 states have internal predecessors, (54), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2024-11-01 14:52:35,757 INFO L276 IsEmpty]: Start isEmpty. Operand 176 states and 224 transitions. [2024-11-01 14:52:35,761 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2024-11-01 14:52:35,761 INFO L207 NwaCegarLoop]: Found error trace [2024-11-01 14:52:35,762 INFO L215 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-01 14:52:35,773 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (2)] Ended with exit code 0 [2024-11-01 14:52:35,962 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2024-11-01 14:52:35,963 INFO L396 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_device_create_file_dev_attr_of_sensor_device_attributeErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_device_create_file_dev_attr_of_sensor_device_attributeErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-01 14:52:35,963 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-01 14:52:35,964 INFO L85 PathProgramCache]: Analyzing trace with hash -1334477098, now seen corresponding path program 1 times [2024-11-01 14:52:35,964 INFO L118 FreeRefinementEngine]: Executing refinement strategy FIXED_PREFERENCES [2024-11-01 14:52:35,964 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModulePreferences [575741740] [2024-11-01 14:52:35,964 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-01 14:52:35,964 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2024-11-01 14:52:35,965 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2024-11-01 14:52:35,968 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2024-11-01 14:52:35,969 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2024-11-01 14:52:37,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-01 14:52:37,702 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-01 14:52:38,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-01 14:52:38,710 INFO L130 FreeRefinementEngine]: Strategy FIXED_PREFERENCES found a feasible trace [2024-11-01 14:52:38,710 INFO L325 BasicCegarLoop]: Counterexample is feasible [2024-11-01 14:52:38,712 INFO L782 garLoopResultBuilder]: Registering result UNSAFE for location ldv_device_create_file_dev_attr_of_sensor_device_attributeErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2024-11-01 14:52:38,732 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (3)] Forceful destruction successful, exit code 0 [2024-11-01 14:52:38,913 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2024-11-01 14:52:38,916 INFO L407 BasicCegarLoop]: Path program histogram: [1, 1] [2024-11-01 14:52:39,019 INFO L170 ceAbstractionStarter]: Computing trace abstraction results [2024-11-01 14:52:39,023 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 01.11 02:52:39 BoogieIcfgContainer [2024-11-01 14:52:39,023 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2024-11-01 14:52:39,024 INFO L158 Benchmark]: Toolchain (without parser) took 11797.66ms. Allocated memory was 199.2MB in the beginning and 281.0MB in the end (delta: 81.8MB). Free memory was 172.8MB in the beginning and 194.2MB in the end (delta: -21.4MB). Peak memory consumption was 61.4MB. Max. memory is 8.0GB. [2024-11-01 14:52:39,026 INFO L158 Benchmark]: CDTParser took 0.25ms. Allocated memory is still 199.2MB. Free memory is still 175.2MB. There was no memory consumed. Max. memory is 8.0GB. [2024-11-01 14:52:39,027 INFO L158 Benchmark]: CACSL2BoogieTranslator took 654.96ms. Allocated memory is still 199.2MB. Free memory was 172.8MB in the beginning and 138.7MB in the end (delta: 34.1MB). Peak memory consumption was 33.6MB. Max. memory is 8.0GB. [2024-11-01 14:52:39,028 INFO L158 Benchmark]: Boogie Procedure Inliner took 81.60ms. Allocated memory is still 199.2MB. Free memory was 138.7MB in the beginning and 134.5MB in the end (delta: 4.2MB). Peak memory consumption was 4.2MB. Max. memory is 8.0GB. [2024-11-01 14:52:39,028 INFO L158 Benchmark]: Boogie Preprocessor took 156.52ms. Allocated memory is still 199.2MB. Free memory was 134.5MB in the beginning and 124.6MB in the end (delta: 10.0MB). Peak memory consumption was 10.5MB. Max. memory is 8.0GB. [2024-11-01 14:52:39,029 INFO L158 Benchmark]: RCFGBuilder took 5844.33ms. Allocated memory was 199.2MB in the beginning and 281.0MB in the end (delta: 81.8MB). Free memory was 124.6MB in the beginning and 224.0MB in the end (delta: -99.5MB). Peak memory consumption was 42.1MB. Max. memory is 8.0GB. [2024-11-01 14:52:39,029 INFO L158 Benchmark]: TraceAbstraction took 5049.84ms. Allocated memory is still 281.0MB. Free memory was 223.0MB in the beginning and 194.2MB in the end (delta: 28.8MB). Peak memory consumption was 29.8MB. Max. memory is 8.0GB. [2024-11-01 14:52:39,033 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.25ms. Allocated memory is still 199.2MB. Free memory is still 175.2MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 654.96ms. Allocated memory is still 199.2MB. Free memory was 172.8MB in the beginning and 138.7MB in the end (delta: 34.1MB). Peak memory consumption was 33.6MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 81.60ms. Allocated memory is still 199.2MB. Free memory was 138.7MB in the beginning and 134.5MB in the end (delta: 4.2MB). Peak memory consumption was 4.2MB. Max. memory is 8.0GB. * Boogie Preprocessor took 156.52ms. Allocated memory is still 199.2MB. Free memory was 134.5MB in the beginning and 124.6MB in the end (delta: 10.0MB). Peak memory consumption was 10.5MB. Max. memory is 8.0GB. * RCFGBuilder took 5844.33ms. Allocated memory was 199.2MB in the beginning and 281.0MB in the end (delta: 81.8MB). Free memory was 124.6MB in the beginning and 224.0MB in the end (delta: -99.5MB). Peak memory consumption was 42.1MB. Max. memory is 8.0GB. * TraceAbstraction took 5049.84ms. Allocated memory is still 281.0MB. Free memory was 223.0MB in the beginning and 194.2MB in the end (delta: 28.8MB). Peak memory consumption was 29.8MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 1272]: Unable to prove that a call to reach_error is unreachable Unable to prove that a call to reach_error is unreachable Reason: overapproximation of large string literal at line 1047. Possible FailurePath: [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1174] int LDV_IN_INTERRUPT ; [L1317] int ldv_count_1 = 0; [L1318] int ldv_count_2 = 0; [L1326] int ldv_call_dev_attr_of_sensor_device_attribute = 0; VAL [LDV_IN_INTERRUPT=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1177] struct platform_device *var_group1 ; [L1178] int res_s3c_hwmon_probe_10 ; [L1179] int ldv_s_s3c_hwmon_driver_platform_driver ; [L1180] int tmp ; [L1181] int tmp___0 ; [L1182] int tmp___1 ; [L1184] ldv_s_s3c_hwmon_driver_platform_driver = 0 [L1185] LDV_IN_INTERRUPT = 1 [L1186] FCALL ldv_initialize() [L1187] FCALL ldv_handler_precall() VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_s_s3c_hwmon_driver_platform_driver=0, s3c_hwmon_driver={16:0}] [L1188] CALL, EXPR s3c_hwmon_init() [L1155] int tmp ; [L1157] CALL, EXPR platform_driver_register(& s3c_hwmon_driver) [L1399] return __VERIFIER_nondet_int(); [L1157] RET, EXPR platform_driver_register(& s3c_hwmon_driver) [L1157] tmp = platform_driver_register(& s3c_hwmon_driver) [L1158] return (tmp); VAL [LDV_IN_INTERRUPT=1, \result=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1188] RET, EXPR s3c_hwmon_init() [L1188] tmp = s3c_hwmon_init() [L1189] COND FALSE !(tmp != 0) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_s_s3c_hwmon_driver_platform_driver=0, s3c_hwmon_driver={16:0}] [L1223] tmp___1 = __VERIFIER_nondet_int() VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_s_s3c_hwmon_driver_platform_driver=0, s3c_hwmon_driver={16:0}, tmp___1=-2147483648] [L1224] COND TRUE tmp___1 != 0 || ldv_s_s3c_hwmon_driver_platform_driver != 0 VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_s_s3c_hwmon_driver_platform_driver=0, s3c_hwmon_driver={16:0}] [L1195] tmp___0 = __VERIFIER_nondet_int() [L1197] case 0: VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_s_s3c_hwmon_driver_platform_driver=0, s3c_hwmon_driver={16:0}, tmp___0=0] [L1197] case 0: VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1197] case 0: [L1199] CALL s3c_hwmon_probe(var_group1) [L1020] struct s3c_hwmon_pdata *pdata ; [L1021] struct s3c_hwmon *hwmon ; [L1022] int ret ; [L1023] int i ; [L1024] void *tmp ; [L1025] struct lock_class_key __key ; [L1026] long tmp___0 ; [L1027] long tmp___1 ; [L1028] long tmp___2 ; [L1029] long tmp___3 ; [L1030] struct s3c_hwmon_chcfg *cfg ; [L1032] EXPR dev->dev.platform_data [L1032] pdata = (struct s3c_hwmon_pdata *)dev->dev.platform_data [L1033] ret = 0 VAL [LDV_IN_INTERRUPT=1, __key={4294967323:0}, __this_module={0:0}, dev={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, pdata={-9223372036854775808:0}, s3c_hwmon_driver={16:0}] [L1034] COND FALSE !((unsigned long )pdata == (unsigned long )((struct s3c_hwmon_pdata *)0)) [L1039] CALL, EXPR kzalloc(800U, 208U) [L863] void *tmp ; [L865] CALL, EXPR kmalloc(size, flags | 32768U) [L854] void *tmp___2 ; [L856] CALL, EXPR __kmalloc(size, flags) [L849] CALL, EXPR ldv_malloc(size) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L839] COND TRUE __VERIFIER_nondet_int() [L840] void *res = malloc(size); [L841] CALL, EXPR ldv_is_err(res) VAL [LDV_IN_INTERRUPT=1, \old(ptr)={29:0}, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1284] return ((unsigned long )ptr > 2012UL); VAL [LDV_IN_INTERRUPT=1, \old(ptr)={29:0}, \result=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L841] RET, EXPR ldv_is_err(res) VAL [LDV_IN_INTERRUPT=1, \old(size)=800, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, res={29:0}, s3c_hwmon_driver={16:0}] [L841] CALL assume_abort_if_not(!ldv_is_err(res)) [L833] COND FALSE !(!cond) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L841] RET assume_abort_if_not(!ldv_is_err(res)) [L842] return res; VAL [LDV_IN_INTERRUPT=1, \old(size)=800, \result={29:0}, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L849] RET, EXPR ldv_malloc(size) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}, size=800] [L849] return ldv_malloc(size); [L856] RET, EXPR __kmalloc(size, flags) [L856] tmp___2 = __kmalloc(size, flags) [L857] return (tmp___2); VAL [LDV_IN_INTERRUPT=1, \result={29:0}, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L865] RET, EXPR kmalloc(size, flags | 32768U) [L865] tmp = kmalloc(size, flags | 32768U) [L866] return (tmp); VAL [LDV_IN_INTERRUPT=1, \result={29:0}, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1039] RET, EXPR kzalloc(800U, 208U) [L1039] tmp = kzalloc(800U, 208U) [L1040] hwmon = (struct s3c_hwmon *)tmp VAL [LDV_IN_INTERRUPT=1, __key={4294967323:0}, __this_module={0:0}, dev={0:0}, hwmon={29:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, pdata={-9223372036854775808:0}, s3c_hwmon_driver={16:0}] [L1041] COND FALSE !((unsigned long )hwmon == (unsigned long )((struct s3c_hwmon *)0)) [L1046] CALL platform_set_drvdata(dev, (void *)hwmon) [L884] FCALL dev_set_drvdata(& pdev->dev, data) [L1046] RET platform_set_drvdata(dev, (void *)hwmon) [L1047] FCALL __mutex_init(& hwmon->lock, "&hwmon->lock", & __key) [L1048] CALL, EXPR s3c_adc_register(dev, 0, 0, 0U) [L1409] CALL, EXPR ldv_malloc(0UL) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L839] COND FALSE !(__VERIFIER_nondet_int()) [L844] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=0, \result={0:0}, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}, size=0] [L1409] RET, EXPR ldv_malloc(0UL) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1409] return ldv_malloc(0UL); [L1048] RET, EXPR s3c_adc_register(dev, 0, 0, 0U) [L1048] hwmon->client = s3c_adc_register(dev, 0, 0, 0U) [L1049] EXPR hwmon->client VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1049] CALL, EXPR IS_ERR((void const *)hwmon->client) VAL [LDV_IN_INTERRUPT=1, \old(ptr)={0:0}, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1246] long tmp ; VAL [LDV_IN_INTERRUPT=1, \old(ptr)={0:0}, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ptr={0:0}, s3c_hwmon_driver={16:0}] [L1248] CALL, EXPR ldv_is_err(ptr) VAL [LDV_IN_INTERRUPT=1, \old(ptr)={0:0}, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1284] return ((unsigned long )ptr > 2012UL); VAL [LDV_IN_INTERRUPT=1, \old(ptr)={0:0}, \result=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1248] RET, EXPR ldv_is_err(ptr) VAL [LDV_IN_INTERRUPT=1, \old(ptr)={0:0}, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ptr={0:0}, s3c_hwmon_driver={16:0}] [L1248] tmp = ldv_is_err(ptr) [L1249] return (tmp); VAL [LDV_IN_INTERRUPT=1, \old(ptr)={0:0}, \result=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ptr={0:0}, s3c_hwmon_driver={16:0}] [L1049] RET, EXPR IS_ERR((void const *)hwmon->client) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, dev={0:0}, hwmon={29:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, pdata={-9223372036854775808:0}, s3c_hwmon_driver={16:0}] [L1049] tmp___1 = IS_ERR((void const *)hwmon->client) [L1050] COND FALSE !(tmp___1 != 0L) [L1057] CALL, EXPR s3c_hwmon_add_raw(& dev->dev) [L915] return (0); VAL [LDV_IN_INTERRUPT=1, \result=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1057] RET, EXPR s3c_hwmon_add_raw(& dev->dev) [L1057] ret = s3c_hwmon_add_raw(& dev->dev) [L1058] COND FALSE !(ret != 0) [L1062] CALL, EXPR hwmon_device_register(& dev->dev) [L1373] CALL, EXPR ldv_malloc(sizeof(struct device)) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L839] COND FALSE !(__VERIFIER_nondet_int()) [L844] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=1003, \result={0:0}, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}, size=1003] [L1373] RET, EXPR ldv_malloc(sizeof(struct device)) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1373] return ldv_malloc(sizeof(struct device)); [L1062] RET, EXPR hwmon_device_register(& dev->dev) [L1062] hwmon->hwmon_dev = hwmon_device_register(& dev->dev) [L1063] EXPR hwmon->hwmon_dev VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1063] CALL, EXPR IS_ERR((void const *)hwmon->hwmon_dev) VAL [LDV_IN_INTERRUPT=1, \old(ptr)={0:0}, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1246] long tmp ; VAL [LDV_IN_INTERRUPT=1, \old(ptr)={0:0}, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ptr={0:0}, s3c_hwmon_driver={16:0}] [L1248] CALL, EXPR ldv_is_err(ptr) VAL [LDV_IN_INTERRUPT=1, \old(ptr)={0:0}, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1284] return ((unsigned long )ptr > 2012UL); VAL [LDV_IN_INTERRUPT=1, \old(ptr)={0:0}, \result=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1248] RET, EXPR ldv_is_err(ptr) VAL [LDV_IN_INTERRUPT=1, \old(ptr)={0:0}, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ptr={0:0}, s3c_hwmon_driver={16:0}] [L1248] tmp = ldv_is_err(ptr) [L1249] return (tmp); VAL [LDV_IN_INTERRUPT=1, \old(ptr)={0:0}, \result=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ptr={0:0}, s3c_hwmon_driver={16:0}] [L1063] RET, EXPR IS_ERR((void const *)hwmon->hwmon_dev) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, dev={0:0}, hwmon={29:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, pdata={-9223372036854775808:0}, s3c_hwmon_driver={16:0}] [L1063] tmp___3 = IS_ERR((void const *)hwmon->hwmon_dev) [L1064] COND FALSE !(tmp___3 != 0L) [L1071] i = 0 VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, dev={0:0}, hwmon={29:0}, i=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, pdata={-9223372036854775808:0}, s3c_hwmon_driver={16:0}] [L1110] COND TRUE (unsigned int )i <= 7U VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, dev={0:0}, hwmon={29:0}, i=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, pdata={-9223372036854775808:0}, s3c_hwmon_driver={16:0}] [L1074] EXPR pdata->in[i] [L1074] cfg = pdata->in[i] VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, cfg={-9223372036854775808:0}, dev={0:0}, hwmon={29:0}, i=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, pdata={-9223372036854775808:0}, s3c_hwmon_driver={16:0}] [L1075] COND FALSE !((unsigned long )cfg == (unsigned long )((struct s3c_hwmon_chcfg *)0)) [L1079] EXPR cfg->mult VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1079] COND FALSE !(cfg->mult > 65535U) [L1084] EXPR cfg->div VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1084] COND FALSE !(cfg->div == 0U) [L1089] EXPR pdata->in[i] [L1089-L1090] CALL s3c_hwmon_create_attr(& dev->dev, pdata->in[i], (struct s3c_hwmon_attr *)(& hwmon->attrs) + (unsigned int )i, i) [L977] struct sensor_device_attribute *attr ; [L978] int ret ; [L981] attr = & attrs->in [L982] attr->index = channel [L983] attr->dev_attr.attr.name = (char const *)(& attrs->in_name) [L984] attr->dev_attr.attr.mode = 292U [L985] attr->dev_attr.show = & s3c_hwmon_ch_show [L986] CALL ldv_device_create_file_5(dev, (struct device_attribute const *)(& attr->dev_attr)) [L1254] int tmp ; VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_func_arg2={29:168}, s3c_hwmon_driver={16:0}] [L1256] CALL ldv_device_create_file_dev_attr_of_sensor_device_attribute(ldv_func_arg2) VAL [LDV_IN_INTERRUPT=1, \old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1330] COND TRUE ldv_call_dev_attr_of_sensor_device_attribute == 0 [L1331] ldv_count_2 = ldv_count_2 + 1 [L1332] ldv_call_dev_attr_of_sensor_device_attribute = 1 VAL [LDV_IN_INTERRUPT=1, \old(attr)={29:168}, \old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=1, ldv_count_1=0, ldv_count_2=1, s3c_hwmon_driver={16:0}] [L1333] COND FALSE !(ldv_count_1 >= ldv_count_2) [L1335] CALL ldv_error() [L1272] reach_error() VAL [LDV_IN_INTERRUPT=1, \old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=1, ldv_count_1=0, ldv_count_2=1, s3c_hwmon_driver={16:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 14 procedures, 179 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 4.9s, OverallIterations: 2, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 0 SdHoareTripleChecker+Valid, 0.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 0 mSDsluCounter, 1529 SdHoareTripleChecker+Invalid, 0.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1308 mSDsCounter, 0 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 52 IncrementalHoareTripleChecker+Invalid, 52 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 0 mSolverCounterUnsat, 221 mSDtfsCounter, 52 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 156 GetRequests, 144 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=179occurred in iteration=0, InterpolantAutomatonStates: 8, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.0s AutomataMinimizationTime, 1 MinimizatonAttempts, 0 StatesRemovedByMinimization, 0 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 1.6s SatisfiabilityAnalysisTime, 0.8s InterpolantComputationTime, 165 NumberOfCodeBlocks, 165 NumberOfCodeBlocksAsserted, 2 NumberOfCheckSat, 156 ConstructedInterpolants, 0 QuantifiedInterpolants, 226 SizeOfPredicates, 0 NumberOfNonLiveVariables, 458 ConjunctsInSsa, 19 ConjunctsInUnsatCore, 2 InterpolantComputations, 1 PerfectInterpolantSequences, 36/40 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2024-11-01 14:52:39,064 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...