./Ultimate.py --spec ../sv-benchmarks/c/properties/valid-memsafety.prp --file ../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version 551b0097 Calling Ultimate with: /root/.sdkman/candidates/java/21.0.5-tem/bin/java -Dosgi.configuration.area=/storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/AutomizerMemDerefMemtrack.xml -i ../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i -s /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/svcomp-DerefFreeMemtrack-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 14cb0b0179e79f0e2d385464cbe440f1c78ee76831b4c47fbbc7c2a57322304c --- Real Ultimate output --- This is Ultimate 0.3.0-?-551b009-m [2025-01-10 00:03:14,154 INFO L188 SettingsManager]: Resetting all preferences to default values... [2025-01-10 00:03:14,190 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/svcomp-DerefFreeMemtrack-64bit-Automizer_Default.epf [2025-01-10 00:03:14,193 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2025-01-10 00:03:14,193 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2025-01-10 00:03:14,207 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2025-01-10 00:03:14,208 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2025-01-10 00:03:14,208 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2025-01-10 00:03:14,208 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2025-01-10 00:03:14,208 INFO L153 SettingsManager]: * Use memory slicer=true [2025-01-10 00:03:14,208 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2025-01-10 00:03:14,208 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2025-01-10 00:03:14,209 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2025-01-10 00:03:14,209 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2025-01-10 00:03:14,209 INFO L153 SettingsManager]: * Use SBE=true [2025-01-10 00:03:14,209 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2025-01-10 00:03:14,209 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2025-01-10 00:03:14,209 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2025-01-10 00:03:14,209 INFO L153 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2025-01-10 00:03:14,209 INFO L153 SettingsManager]: * Bitprecise bitfields=true [2025-01-10 00:03:14,209 INFO L153 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2025-01-10 00:03:14,209 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2025-01-10 00:03:14,209 INFO L153 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2025-01-10 00:03:14,209 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2025-01-10 00:03:14,209 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2025-01-10 00:03:14,209 INFO L153 SettingsManager]: * Use constant arrays=true [2025-01-10 00:03:14,210 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2025-01-10 00:03:14,210 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2025-01-10 00:03:14,210 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2025-01-10 00:03:14,210 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2025-01-10 00:03:14,210 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2025-01-10 00:03:14,210 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2025-01-10 00:03:14,210 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2025-01-10 00:03:14,210 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2025-01-10 00:03:14,210 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2025-01-10 00:03:14,210 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2025-01-10 00:03:14,210 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2025-01-10 00:03:14,211 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2025-01-10 00:03:14,211 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2025-01-10 00:03:14,211 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2025-01-10 00:03:14,211 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2025-01-10 00:03:14,211 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2025-01-10 00:03:14,211 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2025-01-10 00:03:14,211 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2025-01-10 00:03:14,211 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 14cb0b0179e79f0e2d385464cbe440f1c78ee76831b4c47fbbc7c2a57322304c [2025-01-10 00:03:14,418 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2025-01-10 00:03:14,425 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2025-01-10 00:03:14,428 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2025-01-10 00:03:14,430 INFO L270 PluginConnector]: Initializing CDTParser... [2025-01-10 00:03:14,430 INFO L274 PluginConnector]: CDTParser initialized [2025-01-10 00:03:14,431 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i [2025-01-10 00:03:15,595 INFO L533 CDTParser]: Created temporary CDT project at /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/be8990f0d/eeac29ef33354292b78e9782d3228c25/FLAG270a0a6ff [2025-01-10 00:03:15,948 INFO L384 CDTParser]: Found 1 translation units. [2025-01-10 00:03:15,949 INFO L180 CDTParser]: Scanning /storage/repos/ultimate-jdk21/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i [2025-01-10 00:03:15,965 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/be8990f0d/eeac29ef33354292b78e9782d3228c25/FLAG270a0a6ff [2025-01-10 00:03:16,163 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/be8990f0d/eeac29ef33354292b78e9782d3228c25 [2025-01-10 00:03:16,165 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2025-01-10 00:03:16,166 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2025-01-10 00:03:16,168 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2025-01-10 00:03:16,170 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2025-01-10 00:03:16,173 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2025-01-10 00:03:16,174 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 12:03:16" (1/1) ... [2025-01-10 00:03:16,175 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@378fba94 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:03:16, skipping insertion in model container [2025-01-10 00:03:16,175 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 12:03:16" (1/1) ... [2025-01-10 00:03:16,214 INFO L175 MainTranslator]: Built tables and reachable declarations [2025-01-10 00:03:16,604 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-01-10 00:03:16,605 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-01-10 00:03:16,618 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-01-10 00:03:16,638 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-01-10 00:03:16,640 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-01-10 00:03:16,646 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-01-10 00:03:16,646 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-01-10 00:03:16,647 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-01-10 00:03:16,649 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-01-10 00:03:16,651 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-01-10 00:03:16,662 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-01-10 00:03:16,664 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-01-10 00:03:16,672 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-01-10 00:03:16,710 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-01-10 00:03:16,719 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-01-10 00:03:16,740 ERROR L321 MainTranslator]: Unsupported Syntax: Found a cast between two array/pointer types of different sizes while using memory model HoenickeLindenmann_Original (while Not using bitvector translation) [2025-01-10 00:03:16,740 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieTranslatorObserver@4cf71776 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:03:16, skipping insertion in model container [2025-01-10 00:03:16,740 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2025-01-10 00:03:16,743 INFO L186 ToolchainWalker]: Toolchain execution was canceled (user or tool) before executing de.uni_freiburg.informatik.ultimate.boogie.procedureinliner [2025-01-10 00:03:16,747 INFO L158 Benchmark]: Toolchain (without parser) took 577.29ms. Allocated memory is still 201.3MB. Free memory was 155.6MB in the beginning and 136.6MB in the end (delta: 19.0MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2025-01-10 00:03:16,748 INFO L158 Benchmark]: CDTParser took 0.19ms. Allocated memory is still 209.7MB. Free memory is still 127.1MB. There was no memory consumed. Max. memory is 16.1GB. [2025-01-10 00:03:16,748 INFO L158 Benchmark]: CACSL2BoogieTranslator took 574.57ms. Allocated memory is still 201.3MB. Free memory was 155.6MB in the beginning and 136.6MB in the end (delta: 19.0MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2025-01-10 00:03:16,749 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.19ms. Allocated memory is still 209.7MB. Free memory is still 127.1MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 574.57ms. Allocated memory is still 201.3MB. Free memory was 155.6MB in the beginning and 136.6MB in the end (delta: 19.0MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - UnsupportedSyntaxResult [Line: 959]: Unsupported Syntax Found a cast between two array/pointer types of different sizes while using memory model HoenickeLindenmann_Original (while Not using bitvector translation) RESULT: Ultimate could not prove your program: Toolchain returned no result. Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /root/.sdkman/candidates/java/21.0.5-tem/bin/java -Dosgi.configuration.area=/storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/AutomizerMemDerefMemtrack.xml -i ../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i -s /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/svcomp-DerefFreeMemtrack-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 14cb0b0179e79f0e2d385464cbe440f1c78ee76831b4c47fbbc7c2a57322304c --- Real Ultimate output --- This is Ultimate 0.3.0-?-551b009-m [2025-01-10 00:03:18,699 INFO L188 SettingsManager]: Resetting all preferences to default values... [2025-01-10 00:03:18,842 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/svcomp-DerefFreeMemtrack-64bit-Automizer_Bitvector.epf [2025-01-10 00:03:18,857 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2025-01-10 00:03:18,857 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2025-01-10 00:03:18,901 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2025-01-10 00:03:18,905 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2025-01-10 00:03:18,905 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2025-01-10 00:03:18,905 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2025-01-10 00:03:18,905 INFO L153 SettingsManager]: * Use memory slicer=true [2025-01-10 00:03:18,905 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2025-01-10 00:03:18,905 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2025-01-10 00:03:18,906 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2025-01-10 00:03:18,906 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2025-01-10 00:03:18,906 INFO L153 SettingsManager]: * Use SBE=true [2025-01-10 00:03:18,906 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2025-01-10 00:03:18,906 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2025-01-10 00:03:18,906 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2025-01-10 00:03:18,906 INFO L153 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2025-01-10 00:03:18,906 INFO L153 SettingsManager]: * Bitprecise bitfields=true [2025-01-10 00:03:18,906 INFO L153 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2025-01-10 00:03:18,906 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2025-01-10 00:03:18,906 INFO L153 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2025-01-10 00:03:18,906 INFO L153 SettingsManager]: * Use bitvectors instead of ints=true [2025-01-10 00:03:18,906 INFO L153 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2025-01-10 00:03:18,909 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2025-01-10 00:03:18,910 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2025-01-10 00:03:18,910 INFO L153 SettingsManager]: * Use constant arrays=true [2025-01-10 00:03:18,910 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2025-01-10 00:03:18,910 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2025-01-10 00:03:18,910 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2025-01-10 00:03:18,910 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2025-01-10 00:03:18,910 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2025-01-10 00:03:18,910 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2025-01-10 00:03:18,910 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2025-01-10 00:03:18,910 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2025-01-10 00:03:18,910 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2025-01-10 00:03:18,910 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2025-01-10 00:03:18,910 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2025-01-10 00:03:18,910 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2025-01-10 00:03:18,910 INFO L153 SettingsManager]: * Trace refinement strategy=FOX [2025-01-10 00:03:18,910 INFO L153 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2025-01-10 00:03:18,910 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2025-01-10 00:03:18,910 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2025-01-10 00:03:18,910 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2025-01-10 00:03:18,910 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2025-01-10 00:03:18,911 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 14cb0b0179e79f0e2d385464cbe440f1c78ee76831b4c47fbbc7c2a57322304c [2025-01-10 00:03:19,334 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2025-01-10 00:03:19,340 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2025-01-10 00:03:19,342 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2025-01-10 00:03:19,342 INFO L270 PluginConnector]: Initializing CDTParser... [2025-01-10 00:03:19,343 INFO L274 PluginConnector]: CDTParser initialized [2025-01-10 00:03:19,343 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i [2025-01-10 00:03:20,623 INFO L533 CDTParser]: Created temporary CDT project at /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/71ce74776/5e4c2f4b40a6429c8f8cccde76088414/FLAG71b79fdd0 [2025-01-10 00:03:20,942 INFO L384 CDTParser]: Found 1 translation units. [2025-01-10 00:03:20,944 INFO L180 CDTParser]: Scanning /storage/repos/ultimate-jdk21/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i [2025-01-10 00:03:20,960 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/71ce74776/5e4c2f4b40a6429c8f8cccde76088414/FLAG71b79fdd0 [2025-01-10 00:03:21,209 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/71ce74776/5e4c2f4b40a6429c8f8cccde76088414 [2025-01-10 00:03:21,212 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2025-01-10 00:03:21,214 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2025-01-10 00:03:21,215 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2025-01-10 00:03:21,216 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2025-01-10 00:03:21,219 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2025-01-10 00:03:21,220 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 12:03:21" (1/1) ... [2025-01-10 00:03:21,221 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4992acef and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:03:21, skipping insertion in model container [2025-01-10 00:03:21,221 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 12:03:21" (1/1) ... [2025-01-10 00:03:21,257 INFO L175 MainTranslator]: Built tables and reachable declarations [2025-01-10 00:03:21,507 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-01-10 00:03:21,512 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-01-10 00:03:21,518 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-01-10 00:03:21,529 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-01-10 00:03:21,531 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-01-10 00:03:21,535 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-01-10 00:03:21,536 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-01-10 00:03:21,537 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-01-10 00:03:21,538 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-01-10 00:03:21,539 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-01-10 00:03:21,547 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-01-10 00:03:21,551 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-01-10 00:03:21,561 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-01-10 00:03:21,588 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-01-10 00:03:21,590 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-01-10 00:03:21,610 INFO L200 MainTranslator]: Completed pre-run [2025-01-10 00:03:21,709 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-01-10 00:03:21,737 INFO L204 MainTranslator]: Completed translation [2025-01-10 00:03:21,740 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:03:21 WrapperNode [2025-01-10 00:03:21,740 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2025-01-10 00:03:21,741 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2025-01-10 00:03:21,741 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2025-01-10 00:03:21,741 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2025-01-10 00:03:21,746 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:03:21" (1/1) ... [2025-01-10 00:03:21,759 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:03:21" (1/1) ... [2025-01-10 00:03:21,800 INFO L138 Inliner]: procedures = 81, calls = 168, calls flagged for inlining = 33, calls inlined = 28, statements flattened = 522 [2025-01-10 00:03:21,801 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2025-01-10 00:03:21,801 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2025-01-10 00:03:21,802 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2025-01-10 00:03:21,802 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2025-01-10 00:03:21,813 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:03:21" (1/1) ... [2025-01-10 00:03:21,814 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:03:21" (1/1) ... [2025-01-10 00:03:21,822 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:03:21" (1/1) ... [2025-01-10 00:03:21,896 INFO L175 MemorySlicer]: Split 55 memory accesses to 4 slices as follows [2, 4, 27, 22]. 49 percent of accesses are in the largest equivalence class. The 6 initializations are split as follows [2, 4, 0, 0]. The 35 writes are split as follows [0, 0, 13, 22]. [2025-01-10 00:03:21,896 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:03:21" (1/1) ... [2025-01-10 00:03:21,897 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:03:21" (1/1) ... [2025-01-10 00:03:21,911 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:03:21" (1/1) ... [2025-01-10 00:03:21,913 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:03:21" (1/1) ... [2025-01-10 00:03:21,915 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:03:21" (1/1) ... [2025-01-10 00:03:21,918 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:03:21" (1/1) ... [2025-01-10 00:03:21,920 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:03:21" (1/1) ... [2025-01-10 00:03:21,930 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2025-01-10 00:03:21,934 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2025-01-10 00:03:21,935 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2025-01-10 00:03:21,935 INFO L274 PluginConnector]: RCFGBuilder initialized [2025-01-10 00:03:21,940 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:03:21" (1/1) ... [2025-01-10 00:03:21,944 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2025-01-10 00:03:21,953 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 [2025-01-10 00:03:21,966 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2025-01-10 00:03:21,968 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2025-01-10 00:03:21,985 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_hwmon_remove_raw [2025-01-10 00:03:21,986 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_hwmon_remove_raw [2025-01-10 00:03:21,986 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2025-01-10 00:03:21,986 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2025-01-10 00:03:21,986 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#0 [2025-01-10 00:03:21,986 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#1 [2025-01-10 00:03:21,986 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#2 [2025-01-10 00:03:21,986 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#3 [2025-01-10 00:03:21,986 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4#0 [2025-01-10 00:03:21,986 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4#1 [2025-01-10 00:03:21,986 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4#2 [2025-01-10 00:03:21,986 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4#3 [2025-01-10 00:03:21,986 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#0 [2025-01-10 00:03:21,986 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#1 [2025-01-10 00:03:21,986 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#2 [2025-01-10 00:03:21,986 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#3 [2025-01-10 00:03:21,986 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2025-01-10 00:03:21,987 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2025-01-10 00:03:21,987 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#0 [2025-01-10 00:03:21,987 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#1 [2025-01-10 00:03:21,987 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#2 [2025-01-10 00:03:21,987 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#3 [2025-01-10 00:03:21,987 INFO L130 BoogieDeclarations]: Found specification of procedure PTR_ERR [2025-01-10 00:03:21,987 INFO L138 BoogieDeclarations]: Found implementation of procedure PTR_ERR [2025-01-10 00:03:21,987 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err [2025-01-10 00:03:21,987 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err [2025-01-10 00:03:21,987 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2025-01-10 00:03:21,987 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2025-01-10 00:03:21,987 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1#0 [2025-01-10 00:03:21,987 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1#1 [2025-01-10 00:03:21,987 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1#2 [2025-01-10 00:03:21,987 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1#3 [2025-01-10 00:03:21,987 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_hwmon_remove_attr [2025-01-10 00:03:21,987 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_hwmon_remove_attr [2025-01-10 00:03:21,987 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2025-01-10 00:03:21,987 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4#0 [2025-01-10 00:03:21,987 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4#1 [2025-01-10 00:03:21,987 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4#2 [2025-01-10 00:03:21,987 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4#3 [2025-01-10 00:03:21,987 INFO L130 BoogieDeclarations]: Found specification of procedure platform_get_drvdata [2025-01-10 00:03:21,987 INFO L138 BoogieDeclarations]: Found implementation of procedure platform_get_drvdata [2025-01-10 00:03:21,987 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_device_create_file_dev_attr_of_sensor_device_attribute [2025-01-10 00:03:21,989 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_device_create_file_dev_attr_of_sensor_device_attribute [2025-01-10 00:03:21,990 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1#0 [2025-01-10 00:03:21,990 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1#1 [2025-01-10 00:03:21,990 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1#2 [2025-01-10 00:03:21,991 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1#3 [2025-01-10 00:03:21,991 INFO L130 BoogieDeclarations]: Found specification of procedure hwmon_device_unregister [2025-01-10 00:03:21,991 INFO L138 BoogieDeclarations]: Found implementation of procedure hwmon_device_unregister [2025-01-10 00:03:21,991 INFO L130 BoogieDeclarations]: Found specification of procedure dev_err [2025-01-10 00:03:21,991 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_err [2025-01-10 00:03:21,991 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2025-01-10 00:03:21,991 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2025-01-10 00:03:21,991 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_adc_release [2025-01-10 00:03:21,991 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_adc_release [2025-01-10 00:03:21,991 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1#0 [2025-01-10 00:03:21,991 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1#1 [2025-01-10 00:03:21,991 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1#2 [2025-01-10 00:03:21,991 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1#3 [2025-01-10 00:03:21,991 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2025-01-10 00:03:21,991 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2025-01-10 00:03:21,991 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2025-01-10 00:03:21,991 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2025-01-10 00:03:21,991 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2025-01-10 00:03:21,991 INFO L130 BoogieDeclarations]: Found specification of procedure device_remove_file [2025-01-10 00:03:21,992 INFO L138 BoogieDeclarations]: Found implementation of procedure device_remove_file [2025-01-10 00:03:21,992 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2025-01-10 00:03:21,992 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2025-01-10 00:03:21,992 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2025-01-10 00:03:21,992 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2025-01-10 00:03:22,201 INFO L234 CfgBuilder]: Building ICFG [2025-01-10 00:03:22,203 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2025-01-10 00:03:22,221 INFO L727 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2025-01-10 00:03:27,626 INFO L? ?]: Removed 341 outVars from TransFormulas that were not future-live. [2025-01-10 00:03:27,626 INFO L283 CfgBuilder]: Performing block encoding [2025-01-10 00:03:27,637 INFO L307 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2025-01-10 00:03:27,637 INFO L312 CfgBuilder]: Removed 2 assume(true) statements. [2025-01-10 00:03:27,638 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 12:03:27 BoogieIcfgContainer [2025-01-10 00:03:27,638 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2025-01-10 00:03:27,639 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2025-01-10 00:03:27,640 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2025-01-10 00:03:27,643 INFO L274 PluginConnector]: TraceAbstraction initialized [2025-01-10 00:03:27,644 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 10.01 12:03:21" (1/3) ... [2025-01-10 00:03:27,644 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1671ce83 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 12:03:27, skipping insertion in model container [2025-01-10 00:03:27,644 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:03:21" (2/3) ... [2025-01-10 00:03:27,644 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1671ce83 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 12:03:27, skipping insertion in model container [2025-01-10 00:03:27,644 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 12:03:27" (3/3) ... [2025-01-10 00:03:27,645 INFO L128 eAbstractionObserver]: Analyzing ICFG linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i [2025-01-10 00:03:27,656 INFO L216 ceAbstractionStarter]: Automizer settings: Hoare:None NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2025-01-10 00:03:27,657 INFO L151 ceAbstractionStarter]: Applying trace abstraction to ICFG linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i that has 17 procedures, 294 locations, 1 initial locations, 2 loop locations, and 57 error locations. [2025-01-10 00:03:27,700 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2025-01-10 00:03:27,709 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=None, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@739831e4, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2025-01-10 00:03:27,709 INFO L334 AbstractCegarLoop]: Starting to check reachability of 57 error locations. [2025-01-10 00:03:27,713 INFO L276 IsEmpty]: Start isEmpty. Operand has 293 states, 178 states have (on average 1.550561797752809) internal successors, (276), 242 states have internal predecessors, (276), 42 states have call successors, (42), 16 states have call predecessors, (42), 15 states have return successors, (39), 39 states have call predecessors, (39), 39 states have call successors, (39) [2025-01-10 00:03:27,717 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2025-01-10 00:03:27,717 INFO L210 NwaCegarLoop]: Found error trace [2025-01-10 00:03:27,718 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-01-10 00:03:27,718 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ldv_errorErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 54 more)] === [2025-01-10 00:03:27,722 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-01-10 00:03:27,722 INFO L85 PathProgramCache]: Analyzing trace with hash 430187137, now seen corresponding path program 1 times [2025-01-10 00:03:27,729 INFO L118 FreeRefinementEngine]: Executing refinement strategy FOX [2025-01-10 00:03:27,730 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [469301414] [2025-01-10 00:03:27,730 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-01-10 00:03:27,731 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2025-01-10 00:03:27,731 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 [2025-01-10 00:03:27,733 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2025-01-10 00:03:27,735 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2025-01-10 00:03:27,891 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 9 statements into 1 equivalence classes. [2025-01-10 00:03:27,925 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 9 of 9 statements. [2025-01-10 00:03:27,925 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-01-10 00:03:27,925 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-01-10 00:03:27,931 INFO L256 TraceCheckSpWp]: Trace formula consists of 185 conjuncts, 2 conjuncts are in the unsatisfiable core [2025-01-10 00:03:27,934 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2025-01-10 00:03:27,976 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-01-10 00:03:27,976 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2025-01-10 00:03:27,977 INFO L136 FreeRefinementEngine]: Strategy FOX found an infeasible trace [2025-01-10 00:03:27,977 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [469301414] [2025-01-10 00:03:27,977 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [469301414] provided 1 perfect and 0 imperfect interpolant sequences [2025-01-10 00:03:27,977 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-01-10 00:03:27,978 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-01-10 00:03:27,979 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1193093105] [2025-01-10 00:03:27,979 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-01-10 00:03:27,981 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-01-10 00:03:27,981 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy FOX [2025-01-10 00:03:27,996 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-01-10 00:03:27,997 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-01-10 00:03:27,999 INFO L87 Difference]: Start difference. First operand has 293 states, 178 states have (on average 1.550561797752809) internal successors, (276), 242 states have internal predecessors, (276), 42 states have call successors, (42), 16 states have call predecessors, (42), 15 states have return successors, (39), 39 states have call predecessors, (39), 39 states have call successors, (39) Second operand has 3 states, 3 states have (on average 3.0) internal successors, (9), 3 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-01-10 00:03:28,086 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-01-10 00:03:28,087 INFO L93 Difference]: Finished difference Result 318 states and 389 transitions. [2025-01-10 00:03:28,088 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-01-10 00:03:28,089 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.0) internal successors, (9), 3 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 9 [2025-01-10 00:03:28,090 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-01-10 00:03:28,095 INFO L225 Difference]: With dead ends: 318 [2025-01-10 00:03:28,096 INFO L226 Difference]: Without dead ends: 307 [2025-01-10 00:03:28,097 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-01-10 00:03:28,099 INFO L435 NwaCegarLoop]: 350 mSDtfsCounter, 36 mSDsluCounter, 339 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 689 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2025-01-10 00:03:28,099 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [36 Valid, 689 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2025-01-10 00:03:28,109 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 307 states. [2025-01-10 00:03:28,129 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 307 to 301. [2025-01-10 00:03:28,131 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 301 states, 191 states have (on average 1.5235602094240839) internal successors, (291), 250 states have internal predecessors, (291), 39 states have call successors, (39), 15 states have call predecessors, (39), 14 states have return successors, (38), 38 states have call predecessors, (38), 38 states have call successors, (38) [2025-01-10 00:03:28,136 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 301 states to 301 states and 368 transitions. [2025-01-10 00:03:28,137 INFO L78 Accepts]: Start accepts. Automaton has 301 states and 368 transitions. Word has length 9 [2025-01-10 00:03:28,137 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-01-10 00:03:28,137 INFO L471 AbstractCegarLoop]: Abstraction has 301 states and 368 transitions. [2025-01-10 00:03:28,137 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.0) internal successors, (9), 3 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-01-10 00:03:28,137 INFO L276 IsEmpty]: Start isEmpty. Operand 301 states and 368 transitions. [2025-01-10 00:03:28,138 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 15 [2025-01-10 00:03:28,138 INFO L210 NwaCegarLoop]: Found error trace [2025-01-10 00:03:28,138 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-01-10 00:03:28,146 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2025-01-10 00:03:28,340 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2025-01-10 00:03:28,340 INFO L396 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr55ASSERT_VIOLATIONMEMORY_LEAK === [ldv_errorErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 54 more)] === [2025-01-10 00:03:28,341 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-01-10 00:03:28,341 INFO L85 PathProgramCache]: Analyzing trace with hash 346427658, now seen corresponding path program 1 times [2025-01-10 00:03:28,342 INFO L118 FreeRefinementEngine]: Executing refinement strategy FOX [2025-01-10 00:03:28,342 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1199506902] [2025-01-10 00:03:28,342 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-01-10 00:03:28,342 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2025-01-10 00:03:28,342 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 [2025-01-10 00:03:28,344 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2025-01-10 00:03:28,356 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2025-01-10 00:03:28,498 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 14 statements into 1 equivalence classes. [2025-01-10 00:03:28,530 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 14 of 14 statements. [2025-01-10 00:03:28,531 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-01-10 00:03:28,531 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-01-10 00:03:28,535 INFO L256 TraceCheckSpWp]: Trace formula consists of 184 conjuncts, 2 conjuncts are in the unsatisfiable core [2025-01-10 00:03:28,536 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2025-01-10 00:03:28,627 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-01-10 00:03:28,627 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2025-01-10 00:03:28,627 INFO L136 FreeRefinementEngine]: Strategy FOX found an infeasible trace [2025-01-10 00:03:28,627 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1199506902] [2025-01-10 00:03:28,627 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1199506902] provided 1 perfect and 0 imperfect interpolant sequences [2025-01-10 00:03:28,627 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-01-10 00:03:28,627 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2025-01-10 00:03:28,627 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1321471935] [2025-01-10 00:03:28,627 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-01-10 00:03:28,628 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-01-10 00:03:28,628 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy FOX [2025-01-10 00:03:28,629 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-01-10 00:03:28,629 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-01-10 00:03:28,629 INFO L87 Difference]: Start difference. First operand 301 states and 368 transitions. Second operand has 3 states, 2 states have (on average 7.0) internal successors, (14), 3 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-01-10 00:03:32,644 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2025-01-10 00:03:32,999 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-01-10 00:03:33,001 INFO L93 Difference]: Finished difference Result 324 states and 400 transitions. [2025-01-10 00:03:33,001 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-01-10 00:03:33,002 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 7.0) internal successors, (14), 3 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 14 [2025-01-10 00:03:33,002 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-01-10 00:03:33,004 INFO L225 Difference]: With dead ends: 324 [2025-01-10 00:03:33,004 INFO L226 Difference]: Without dead ends: 319 [2025-01-10 00:03:33,005 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-01-10 00:03:33,011 INFO L435 NwaCegarLoop]: 342 mSDtfsCounter, 20 mSDsluCounter, 275 mSDsCounter, 0 mSdLazyCounter, 64 mSolverCounterSat, 0 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 617 SdHoareTripleChecker+Invalid, 65 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 64 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.3s IncrementalHoareTripleChecker+Time [2025-01-10 00:03:33,012 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 617 Invalid, 65 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 64 Invalid, 1 Unknown, 0 Unchecked, 4.3s Time] [2025-01-10 00:03:33,013 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 319 states. [2025-01-10 00:03:33,033 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 319 to 318. [2025-01-10 00:03:33,035 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 318 states, 208 states have (on average 1.5144230769230769) internal successors, (315), 267 states have internal predecessors, (315), 39 states have call successors, (39), 15 states have call predecessors, (39), 14 states have return successors, (38), 38 states have call predecessors, (38), 38 states have call successors, (38) [2025-01-10 00:03:33,040 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 318 states to 318 states and 392 transitions. [2025-01-10 00:03:33,040 INFO L78 Accepts]: Start accepts. Automaton has 318 states and 392 transitions. Word has length 14 [2025-01-10 00:03:33,040 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-01-10 00:03:33,040 INFO L471 AbstractCegarLoop]: Abstraction has 318 states and 392 transitions. [2025-01-10 00:03:33,040 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 7.0) internal successors, (14), 3 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-01-10 00:03:33,041 INFO L276 IsEmpty]: Start isEmpty. Operand 318 states and 392 transitions. [2025-01-10 00:03:33,041 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2025-01-10 00:03:33,041 INFO L210 NwaCegarLoop]: Found error trace [2025-01-10 00:03:33,041 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-01-10 00:03:33,050 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2025-01-10 00:03:33,242 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2025-01-10 00:03:33,242 INFO L396 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr55ASSERT_VIOLATIONMEMORY_LEAK === [ldv_errorErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 54 more)] === [2025-01-10 00:03:33,243 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-01-10 00:03:33,244 INFO L85 PathProgramCache]: Analyzing trace with hash -1541430350, now seen corresponding path program 1 times [2025-01-10 00:03:33,245 INFO L118 FreeRefinementEngine]: Executing refinement strategy FOX [2025-01-10 00:03:33,245 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1604197440] [2025-01-10 00:03:33,245 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-01-10 00:03:33,245 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2025-01-10 00:03:33,245 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 [2025-01-10 00:03:33,248 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2025-01-10 00:03:33,249 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2025-01-10 00:03:33,388 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 24 statements into 1 equivalence classes. [2025-01-10 00:03:33,419 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 24 of 24 statements. [2025-01-10 00:03:33,419 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-01-10 00:03:33,419 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-01-10 00:03:33,423 INFO L256 TraceCheckSpWp]: Trace formula consists of 210 conjuncts, 2 conjuncts are in the unsatisfiable core [2025-01-10 00:03:33,424 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2025-01-10 00:03:33,475 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-01-10 00:03:33,475 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2025-01-10 00:03:33,475 INFO L136 FreeRefinementEngine]: Strategy FOX found an infeasible trace [2025-01-10 00:03:33,475 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1604197440] [2025-01-10 00:03:33,475 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1604197440] provided 1 perfect and 0 imperfect interpolant sequences [2025-01-10 00:03:33,475 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-01-10 00:03:33,475 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-01-10 00:03:33,475 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [836435313] [2025-01-10 00:03:33,475 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-01-10 00:03:33,476 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-01-10 00:03:33,476 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy FOX [2025-01-10 00:03:33,476 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-01-10 00:03:33,477 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-01-10 00:03:33,477 INFO L87 Difference]: Start difference. First operand 318 states and 392 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (1), 1 states have call predecessors, (1), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2025-01-10 00:03:33,514 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-01-10 00:03:33,514 INFO L93 Difference]: Finished difference Result 323 states and 396 transitions. [2025-01-10 00:03:33,515 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-01-10 00:03:33,515 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (1), 1 states have call predecessors, (1), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2025-01-10 00:03:33,515 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-01-10 00:03:33,517 INFO L225 Difference]: With dead ends: 323 [2025-01-10 00:03:33,517 INFO L226 Difference]: Without dead ends: 323 [2025-01-10 00:03:33,518 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 22 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-01-10 00:03:33,519 INFO L435 NwaCegarLoop]: 342 mSDtfsCounter, 329 mSDsluCounter, 3 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 329 SdHoareTripleChecker+Valid, 345 SdHoareTripleChecker+Invalid, 6 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2025-01-10 00:03:33,519 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [329 Valid, 345 Invalid, 6 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2025-01-10 00:03:33,521 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 323 states. [2025-01-10 00:03:33,531 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 323 to 319. [2025-01-10 00:03:33,532 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 319 states, 209 states have (on average 1.5119617224880382) internal successors, (316), 268 states have internal predecessors, (316), 39 states have call successors, (39), 15 states have call predecessors, (39), 14 states have return successors, (38), 38 states have call predecessors, (38), 38 states have call successors, (38) [2025-01-10 00:03:33,533 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 319 states to 319 states and 393 transitions. [2025-01-10 00:03:33,534 INFO L78 Accepts]: Start accepts. Automaton has 319 states and 393 transitions. Word has length 24 [2025-01-10 00:03:33,534 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-01-10 00:03:33,534 INFO L471 AbstractCegarLoop]: Abstraction has 319 states and 393 transitions. [2025-01-10 00:03:33,534 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (1), 1 states have call predecessors, (1), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2025-01-10 00:03:33,534 INFO L276 IsEmpty]: Start isEmpty. Operand 319 states and 393 transitions. [2025-01-10 00:03:33,534 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2025-01-10 00:03:33,534 INFO L210 NwaCegarLoop]: Found error trace [2025-01-10 00:03:33,534 INFO L218 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-01-10 00:03:33,545 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2025-01-10 00:03:33,741 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2025-01-10 00:03:33,742 INFO L396 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ldv_errorErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 54 more)] === [2025-01-10 00:03:33,743 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-01-10 00:03:33,743 INFO L85 PathProgramCache]: Analyzing trace with hash -369020858, now seen corresponding path program 1 times [2025-01-10 00:03:33,743 INFO L118 FreeRefinementEngine]: Executing refinement strategy FOX [2025-01-10 00:03:33,744 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1914443348] [2025-01-10 00:03:33,744 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-01-10 00:03:33,744 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2025-01-10 00:03:33,744 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 [2025-01-10 00:03:33,748 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2025-01-10 00:03:33,750 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2025-01-10 00:03:33,886 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 27 statements into 1 equivalence classes. [2025-01-10 00:03:46,497 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 27 of 27 statements. [2025-01-10 00:03:46,498 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-01-10 00:03:46,498 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is sat [2025-01-10 00:03:46,498 INFO L348 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2025-01-10 00:03:46,571 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 27 statements into 1 equivalence classes. [2025-01-10 00:04:00,966 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 27 of 27 statements. [2025-01-10 00:04:00,967 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-01-10 00:04:00,967 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is sat [2025-01-10 00:04:01,076 INFO L130 FreeRefinementEngine]: Strategy FOX found a feasible trace [2025-01-10 00:04:01,076 INFO L340 BasicCegarLoop]: Counterexample is feasible [2025-01-10 00:04:01,077 INFO L782 garLoopResultBuilder]: Registering result UNSAFE for location ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE (56 of 57 remaining) [2025-01-10 00:04:01,078 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_errorErr0ASSERT_VIOLATIONMEMORY_LEAK (55 of 57 remaining) [2025-01-10 00:04:01,078 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE (54 of 57 remaining) [2025-01-10 00:04:01,079 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (53 of 57 remaining) [2025-01-10 00:04:01,079 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE (52 of 57 remaining) [2025-01-10 00:04:01,079 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr4REQUIRES_VIOLATIONMEMORY_DEREFERENCE (51 of 57 remaining) [2025-01-10 00:04:01,079 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE (50 of 57 remaining) [2025-01-10 00:04:01,079 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr6REQUIRES_VIOLATIONMEMORY_DEREFERENCE (49 of 57 remaining) [2025-01-10 00:04:01,079 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE (48 of 57 remaining) [2025-01-10 00:04:01,079 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr8REQUIRES_VIOLATIONMEMORY_DEREFERENCE (47 of 57 remaining) [2025-01-10 00:04:01,079 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE (46 of 57 remaining) [2025-01-10 00:04:01,079 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr10REQUIRES_VIOLATIONMEMORY_DEREFERENCE (45 of 57 remaining) [2025-01-10 00:04:01,079 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE (44 of 57 remaining) [2025-01-10 00:04:01,079 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr12REQUIRES_VIOLATIONMEMORY_DEREFERENCE (43 of 57 remaining) [2025-01-10 00:04:01,079 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE (42 of 57 remaining) [2025-01-10 00:04:01,080 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr14REQUIRES_VIOLATIONMEMORY_DEREFERENCE (41 of 57 remaining) [2025-01-10 00:04:01,080 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE (40 of 57 remaining) [2025-01-10 00:04:01,080 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr16REQUIRES_VIOLATIONMEMORY_DEREFERENCE (39 of 57 remaining) [2025-01-10 00:04:01,080 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr17REQUIRES_VIOLATIONMEMORY_DEREFERENCE (38 of 57 remaining) [2025-01-10 00:04:01,080 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr18REQUIRES_VIOLATIONMEMORY_DEREFERENCE (37 of 57 remaining) [2025-01-10 00:04:01,080 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr19REQUIRES_VIOLATIONMEMORY_DEREFERENCE (36 of 57 remaining) [2025-01-10 00:04:01,080 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr20REQUIRES_VIOLATIONMEMORY_DEREFERENCE (35 of 57 remaining) [2025-01-10 00:04:01,080 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr21REQUIRES_VIOLATIONMEMORY_DEREFERENCE (34 of 57 remaining) [2025-01-10 00:04:01,080 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr22REQUIRES_VIOLATIONMEMORY_DEREFERENCE (33 of 57 remaining) [2025-01-10 00:04:01,080 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr23REQUIRES_VIOLATIONMEMORY_DEREFERENCE (32 of 57 remaining) [2025-01-10 00:04:01,080 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr24REQUIRES_VIOLATIONMEMORY_DEREFERENCE (31 of 57 remaining) [2025-01-10 00:04:01,080 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr25REQUIRES_VIOLATIONMEMORY_DEREFERENCE (30 of 57 remaining) [2025-01-10 00:04:01,080 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr26REQUIRES_VIOLATIONMEMORY_DEREFERENCE (29 of 57 remaining) [2025-01-10 00:04:01,081 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr27REQUIRES_VIOLATIONMEMORY_DEREFERENCE (28 of 57 remaining) [2025-01-10 00:04:01,081 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr28REQUIRES_VIOLATIONMEMORY_DEREFERENCE (27 of 57 remaining) [2025-01-10 00:04:01,081 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr29REQUIRES_VIOLATIONMEMORY_DEREFERENCE (26 of 57 remaining) [2025-01-10 00:04:01,081 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr30REQUIRES_VIOLATIONMEMORY_DEREFERENCE (25 of 57 remaining) [2025-01-10 00:04:01,081 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr31REQUIRES_VIOLATIONMEMORY_DEREFERENCE (24 of 57 remaining) [2025-01-10 00:04:01,081 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr32REQUIRES_VIOLATIONMEMORY_DEREFERENCE (23 of 57 remaining) [2025-01-10 00:04:01,081 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr33REQUIRES_VIOLATIONMEMORY_DEREFERENCE (22 of 57 remaining) [2025-01-10 00:04:01,081 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr34REQUIRES_VIOLATIONMEMORY_DEREFERENCE (21 of 57 remaining) [2025-01-10 00:04:01,081 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr35REQUIRES_VIOLATIONMEMORY_DEREFERENCE (20 of 57 remaining) [2025-01-10 00:04:01,081 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr36REQUIRES_VIOLATIONMEMORY_DEREFERENCE (19 of 57 remaining) [2025-01-10 00:04:01,081 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr37REQUIRES_VIOLATIONMEMORY_DEREFERENCE (18 of 57 remaining) [2025-01-10 00:04:01,081 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr38REQUIRES_VIOLATIONMEMORY_DEREFERENCE (17 of 57 remaining) [2025-01-10 00:04:01,082 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr39REQUIRES_VIOLATIONMEMORY_DEREFERENCE (16 of 57 remaining) [2025-01-10 00:04:01,082 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr40REQUIRES_VIOLATIONMEMORY_DEREFERENCE (15 of 57 remaining) [2025-01-10 00:04:01,082 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr41REQUIRES_VIOLATIONMEMORY_DEREFERENCE (14 of 57 remaining) [2025-01-10 00:04:01,082 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr42REQUIRES_VIOLATIONMEMORY_DEREFERENCE (13 of 57 remaining) [2025-01-10 00:04:01,082 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr43REQUIRES_VIOLATIONMEMORY_DEREFERENCE (12 of 57 remaining) [2025-01-10 00:04:01,082 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr44REQUIRES_VIOLATIONMEMORY_DEREFERENCE (11 of 57 remaining) [2025-01-10 00:04:01,082 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr45REQUIRES_VIOLATIONMEMORY_DEREFERENCE (10 of 57 remaining) [2025-01-10 00:04:01,082 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr46REQUIRES_VIOLATIONMEMORY_DEREFERENCE (9 of 57 remaining) [2025-01-10 00:04:01,082 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr47REQUIRES_VIOLATIONMEMORY_DEREFERENCE (8 of 57 remaining) [2025-01-10 00:04:01,082 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr48ASSERT_VIOLATIONMEMORY_FREE (7 of 57 remaining) [2025-01-10 00:04:01,082 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr49ASSERT_VIOLATIONMEMORY_FREE (6 of 57 remaining) [2025-01-10 00:04:01,082 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr50ASSERT_VIOLATIONMEMORY_FREE (5 of 57 remaining) [2025-01-10 00:04:01,083 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr51REQUIRES_VIOLATIONMEMORY_DEREFERENCE (4 of 57 remaining) [2025-01-10 00:04:01,083 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr52REQUIRES_VIOLATIONMEMORY_DEREFERENCE (3 of 57 remaining) [2025-01-10 00:04:01,083 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr53REQUIRES_VIOLATIONMEMORY_DEREFERENCE (2 of 57 remaining) [2025-01-10 00:04:01,083 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr54REQUIRES_VIOLATIONMEMORY_DEREFERENCE (1 of 57 remaining) [2025-01-10 00:04:01,083 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr55ASSERT_VIOLATIONMEMORY_LEAK (0 of 57 remaining) [2025-01-10 00:04:01,117 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2025-01-10 00:04:01,283 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2025-01-10 00:04:01,287 INFO L422 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1] [2025-01-10 00:04:01,315 INFO L170 ceAbstractionStarter]: Computing trace abstraction results [2025-01-10 00:04:01,317 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 12:04:01 BoogieIcfgContainer [2025-01-10 00:04:01,317 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2025-01-10 00:04:01,318 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2025-01-10 00:04:01,318 INFO L270 PluginConnector]: Initializing Witness Printer... [2025-01-10 00:04:01,318 INFO L274 PluginConnector]: Witness Printer initialized [2025-01-10 00:04:01,319 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 12:03:27" (3/4) ... [2025-01-10 00:04:01,319 INFO L140 WitnessPrinter]: Generating witness for reachability counterexample [2025-01-10 00:04:01,360 INFO L127 tionWitnessGenerator]: Generated YAML witness of length 11. [2025-01-10 00:04:01,402 INFO L149 WitnessManager]: Wrote witness to /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/witness.graphml [2025-01-10 00:04:01,402 INFO L149 WitnessManager]: Wrote witness to /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/witness.yml [2025-01-10 00:04:01,402 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2025-01-10 00:04:01,403 INFO L158 Benchmark]: Toolchain (without parser) took 40189.57ms. Allocated memory was 83.9MB in the beginning and 109.1MB in the end (delta: 25.2MB). Free memory was 57.4MB in the beginning and 30.4MB in the end (delta: 27.1MB). Peak memory consumption was 55.7MB. Max. memory is 16.1GB. [2025-01-10 00:04:01,403 INFO L158 Benchmark]: CDTParser took 0.21ms. Allocated memory is still 83.9MB. Free memory is still 62.0MB. There was no memory consumed. Max. memory is 16.1GB. [2025-01-10 00:04:01,403 INFO L158 Benchmark]: CACSL2BoogieTranslator took 525.76ms. Allocated memory is still 83.9MB. Free memory was 57.4MB in the beginning and 26.5MB in the end (delta: 30.9MB). Peak memory consumption was 33.6MB. Max. memory is 16.1GB. [2025-01-10 00:04:01,404 INFO L158 Benchmark]: Boogie Procedure Inliner took 59.87ms. Allocated memory is still 83.9MB. Free memory was 26.5MB in the beginning and 22.7MB in the end (delta: 3.8MB). There was no memory consumed. Max. memory is 16.1GB. [2025-01-10 00:04:01,404 INFO L158 Benchmark]: Boogie Preprocessor took 132.16ms. Allocated memory is still 83.9MB. Free memory was 22.7MB in the beginning and 50.9MB in the end (delta: -28.2MB). Peak memory consumption was 12.9MB. Max. memory is 16.1GB. [2025-01-10 00:04:01,404 INFO L158 Benchmark]: RCFGBuilder took 5703.61ms. Allocated memory is still 83.9MB. Free memory was 50.9MB in the beginning and 31.7MB in the end (delta: 19.2MB). Peak memory consumption was 46.5MB. Max. memory is 16.1GB. [2025-01-10 00:04:01,404 INFO L158 Benchmark]: TraceAbstraction took 33677.96ms. Allocated memory was 83.9MB in the beginning and 109.1MB in the end (delta: 25.2MB). Free memory was 31.3MB in the beginning and 38.7MB in the end (delta: -7.5MB). Peak memory consumption was 19.9MB. Max. memory is 16.1GB. [2025-01-10 00:04:01,405 INFO L158 Benchmark]: Witness Printer took 84.60ms. Allocated memory is still 109.1MB. Free memory was 38.7MB in the beginning and 30.4MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2025-01-10 00:04:01,406 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.21ms. Allocated memory is still 83.9MB. Free memory is still 62.0MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 525.76ms. Allocated memory is still 83.9MB. Free memory was 57.4MB in the beginning and 26.5MB in the end (delta: 30.9MB). Peak memory consumption was 33.6MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 59.87ms. Allocated memory is still 83.9MB. Free memory was 26.5MB in the beginning and 22.7MB in the end (delta: 3.8MB). There was no memory consumed. Max. memory is 16.1GB. * Boogie Preprocessor took 132.16ms. Allocated memory is still 83.9MB. Free memory was 22.7MB in the beginning and 50.9MB in the end (delta: -28.2MB). Peak memory consumption was 12.9MB. Max. memory is 16.1GB. * RCFGBuilder took 5703.61ms. Allocated memory is still 83.9MB. Free memory was 50.9MB in the beginning and 31.7MB in the end (delta: 19.2MB). Peak memory consumption was 46.5MB. Max. memory is 16.1GB. * TraceAbstraction took 33677.96ms. Allocated memory was 83.9MB in the beginning and 109.1MB in the end (delta: 25.2MB). Free memory was 31.3MB in the beginning and 38.7MB in the end (delta: -7.5MB). Peak memory consumption was 19.9MB. Max. memory is 16.1GB. * Witness Printer took 84.60ms. Allocated memory is still 109.1MB. Free memory was 38.7MB in the beginning and 30.4MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - CounterExampleResult [Line: -1]: pointer dereference may fail pointer dereference may fail We found a FailurePath: [L883] int ldv_state_variable_1 ; [L884] struct platform_device *s3c_hwmon_driver_group0 ; [L885] int LDV_IN_INTERRUPT = 1; [L886] int ref_cnt ; [L887] int ldv_state_variable_0 ; [L1170-L1172] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1170-L1172] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1170-L1172] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1170-L1172] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1170-L1172] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1170-L1172] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1170-L1172] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1170-L1172] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1170-L1172] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1170-L1172] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1170-L1172] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1170-L1172] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1170-L1172] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1170-L1172] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1170-L1172] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1170-L1172] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1170-L1172] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1170-L1172] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1170-L1172] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1170-L1172] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1170-L1172] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1170-L1172] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1170-L1172] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1188] int ldv_retval_0 ; [L1189] int ldv_retval_1 ; [L1366] int ldv_count_1 = 0; [L1367] int ldv_count_2 = 0; [L1375] int ldv_call_dev_attr_of_sensor_device_attribute = 0; VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group0={0:0}] [L1203] int tmp ; [L1204] int tmp___0 ; [L1205] int tmp___1 ; [L1207] FCALL ldv_initialize() [L1208] ldv_state_variable_1 = 0 [L1209] ref_cnt = 0 [L1210] ldv_state_variable_0 = 1 VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group0={0:0}] [L1212] tmp = __VERIFIER_nondet_int() [L1214] case 0: VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group0={0:0}, tmp=1] [L1214] case 0: [L1244] case 1: [L1246] tmp___1 = __VERIFIER_nondet_int() [L1248] case 0: VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group0={0:0}, tmp___1=1] [L1244] case 1: [L1256] case 1: VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group0={0:0}] [L1244] case 1: [L1258] CALL, EXPR s3c_hwmon_init() [L1175] int tmp ; [L1177] CALL, EXPR platform_driver_register(& s3c_hwmon_driver) [L1441] return __VERIFIER_nondet_int(); [L1177] RET, EXPR platform_driver_register(& s3c_hwmon_driver) [L1177] tmp = platform_driver_register(& s3c_hwmon_driver) [L1178] return (tmp); VAL [LDV_IN_INTERRUPT=1, \result=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group0={0:0}] [L1258] RET, EXPR s3c_hwmon_init() [L1258] ldv_retval_1 = s3c_hwmon_init() [L1244] case 1: [L1260] ldv_state_variable_0 = 3 [L1261] ldv_state_variable_1 = 1 [L1262] CALL ldv_initialize_platform_driver_1() [L1194] void *tmp ; VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group0={0:0}] [L1196] CALL, EXPR ldv_zalloc(624U) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group0={0:0}] [L824] void *p ; [L825] void *tmp ; [L826] int tmp___0 ; [L828] tmp___0 = __VERIFIER_nondet_int() [L829] COND TRUE tmp___0 != 0 [L830] return (0); VAL [LDV_IN_INTERRUPT=1, \old(size)=624, \result={0:0}, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group0={0:0}, size=624] [L1196] RET, EXPR ldv_zalloc(624U) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group0={0:0}] [L1196] tmp = ldv_zalloc(624U) [L1197] s3c_hwmon_driver_group0 = (struct platform_device *)tmp VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group0={0:0}] [L1262] RET ldv_initialize_platform_driver_1() [L1244] case 1: VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group0={0:0}] [L1212] tmp = __VERIFIER_nondet_int() [L1214] case 0: VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group0={0:0}, tmp=0] [L1214] case 0: VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group0={0:0}] [L1214] case 0: [L1216] tmp___0 = __VERIFIER_nondet_int() [L1218] case 0: VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group0={0:0}, tmp=0, tmp___0=0] [L1214] case 0: VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group0={0:0}] [L1214] case 0: [L1220] CALL s3c_hwmon_probe(s3c_hwmon_driver_group0) [L1040] struct s3c_hwmon_pdata *pdata ; [L1041] struct s3c_hwmon *hwmon ; [L1042] int ret ; [L1043] int i ; [L1044] void *tmp ; [L1045] struct lock_class_key __key ; [L1046] long tmp___0 ; [L1047] long tmp___1 ; [L1048] long tmp___2 ; [L1049] long tmp___3 ; [L1050] struct s3c_hwmon_chcfg *cfg ; VAL [LDV_IN_INTERRUPT=1, __key={8388608:0}, __this_module={0:0}, dev={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={16:0}, s3c_hwmon_driver_group0={0:0}] [L1052] dev->dev.platform_data - UnprovableResult [Line: 12]: Unable to prove that all allocated memory was freed Unable to prove that all allocated memory was freed Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: 1458]: Unable to prove that free always succeeds Unable to prove that free always succeeds Reason: Not analyzed. - UnprovableResult [Line: 1458]: Unable to prove that free always succeeds Unable to prove that free always succeeds Reason: Not analyzed. - UnprovableResult [Line: 1458]: Unable to prove that free always succeeds Unable to prove that free always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: -1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: Not analyzed. - UnprovableResult [Line: 1201]: Unable to prove that all allocated memory was freed Unable to prove that all allocated memory was freed Reason: Not analyzed. - StatisticsResult: Ultimate Automizer benchmark data CFG has 17 procedures, 294 locations, 57 error locations. Started 1 CEGAR loops. OverallTime: 33.6s, OverallIterations: 4, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 4.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 1 mSolverCounterUnknown, 385 SdHoareTripleChecker+Valid, 4.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 385 mSDsluCounter, 1651 SdHoareTripleChecker+Invalid, 4.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 617 mSDsCounter, 4 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 77 IncrementalHoareTripleChecker+Invalid, 82 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 4 mSolverCounterUnsat, 1034 mSDtfsCounter, 77 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 44 GetRequests, 41 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=319occurred in iteration=3, InterpolantAutomatonStates: 9, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 3 MinimizatonAttempts, 11 StatesRemovedByMinimization, 3 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 12.7s SatisfiabilityAnalysisTime, 0.2s InterpolantComputationTime, 74 NumberOfCodeBlocks, 74 NumberOfCodeBlocksAsserted, 4 NumberOfCheckSat, 44 ConstructedInterpolants, 0 QuantifiedInterpolants, 90 SizeOfPredicates, 0 NumberOfNonLiveVariables, 579 ConjunctsInSsa, 6 ConjunctsInUnsatCore, 3 InterpolantComputations, 3 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available, ConComCheckerStatistics: No data available RESULT: Ultimate proved your program to be incorrect! [2025-01-10 00:04:01,435 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Writing human readable error path to file UltimateCounterExample.errorpath Result: FALSE(valid-deref)