./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point_ldv-val-v0.8_false-unreach-call.cil.out.c --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version aa418289 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_d4d620cd-204f-496c-aebb-7f1e952d9a48/bin-2019/ukojak/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_d4d620cd-204f-496c-aebb-7f1e952d9a48/bin-2019/ukojak/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_d4d620cd-204f-496c-aebb-7f1e952d9a48/bin-2019/ukojak/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_d4d620cd-204f-496c-aebb-7f1e952d9a48/bin-2019/ukojak/config/KojakReach.xml -i ../../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point_ldv-val-v0.8_false-unreach-call.cil.out.c -s /tmp/vcloud-vcloud-master/worker/working_dir_d4d620cd-204f-496c-aebb-7f1e952d9a48/bin-2019/ukojak/config/svcomp-Reach-64bit-Kojak_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_d4d620cd-204f-496c-aebb-7f1e952d9a48/bin-2019/ukojak --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Kojak --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 506e9770d381a9f564fa805f945530032a6829a8 ............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_d4d620cd-204f-496c-aebb-7f1e952d9a48/bin-2019/ukojak/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_d4d620cd-204f-496c-aebb-7f1e952d9a48/bin-2019/ukojak/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_d4d620cd-204f-496c-aebb-7f1e952d9a48/bin-2019/ukojak/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_d4d620cd-204f-496c-aebb-7f1e952d9a48/bin-2019/ukojak/config/KojakReach.xml -i ../../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point_ldv-val-v0.8_false-unreach-call.cil.out.c -s /tmp/vcloud-vcloud-master/worker/working_dir_d4d620cd-204f-496c-aebb-7f1e952d9a48/bin-2019/ukojak/config/svcomp-Reach-64bit-Kojak_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_d4d620cd-204f-496c-aebb-7f1e952d9a48/bin-2019/ukojak --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Kojak --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 506e9770d381a9f564fa805f945530032a6829a8 .............................................................................................................................................................................................................................................................. Execution finished normally Writing output log to file Ultimate.log Result: ERROR: ExceptionOrErrorResult: IllegalArgumentException: Indexed Sort BitVec undefined --- Real Ultimate output --- This is Ultimate 0.1.23-aa41828 [2018-11-22 22:15:48,004 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-22 22:15:48,005 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-22 22:15:48,012 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-22 22:15:48,012 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-22 22:15:48,013 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-22 22:15:48,014 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-22 22:15:48,015 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-22 22:15:48,016 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-22 22:15:48,017 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-22 22:15:48,018 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-22 22:15:48,018 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-22 22:15:48,018 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-22 22:15:48,019 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-22 22:15:48,020 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-22 22:15:48,021 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-22 22:15:48,021 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-22 22:15:48,022 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-22 22:15:48,024 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-22 22:15:48,025 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-22 22:15:48,026 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-22 22:15:48,027 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-22 22:15:48,028 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-22 22:15:48,028 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-22 22:15:48,029 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-22 22:15:48,029 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-22 22:15:48,030 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-22 22:15:48,031 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-22 22:15:48,031 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-22 22:15:48,032 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-22 22:15:48,032 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-22 22:15:48,033 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-22 22:15:48,033 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-22 22:15:48,033 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-22 22:15:48,034 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-22 22:15:48,034 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-22 22:15:48,035 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_d4d620cd-204f-496c-aebb-7f1e952d9a48/bin-2019/ukojak/config/svcomp-Reach-64bit-Kojak_Default.epf [2018-11-22 22:15:48,043 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-22 22:15:48,043 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-22 22:15:48,044 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-22 22:15:48,044 INFO L133 SettingsManager]: * ... to procedures called more than once=ALWAYS [2018-11-22 22:15:48,045 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-22 22:15:48,045 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-22 22:15:48,045 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-22 22:15:48,045 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-22 22:15:48,045 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-22 22:15:48,046 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-22 22:15:48,046 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-22 22:15:48,046 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-22 22:15:48,046 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-22 22:15:48,046 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-22 22:15:48,046 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-22 22:15:48,047 INFO L131 SettingsManager]: Preferences of CodeCheck differ from their defaults: [2018-11-22 22:15:48,047 INFO L133 SettingsManager]: * Timeout in seconds=1000000 [2018-11-22 22:15:48,047 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-22 22:15:48,047 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-22 22:15:48,047 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 [2018-11-22 22:15:48,047 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-22 22:15:48,048 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-22 22:15:48,048 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-22 22:15:48,048 INFO L133 SettingsManager]: * Trace refinement strategy=PENGUIN [2018-11-22 22:15:48,048 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-22 22:15:48,048 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-11-22 22:15:48,048 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-22 22:15:48,048 INFO L133 SettingsManager]: * To the following directory=dump/ Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_d4d620cd-204f-496c-aebb-7f1e952d9a48/bin-2019/ukojak Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Kojak Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 506e9770d381a9f564fa805f945530032a6829a8 [2018-11-22 22:15:48,071 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-22 22:15:48,079 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-22 22:15:48,081 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-22 22:15:48,081 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-22 22:15:48,082 INFO L276 PluginConnector]: CDTParser initialized [2018-11-22 22:15:48,082 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_d4d620cd-204f-496c-aebb-7f1e952d9a48/bin-2019/ukojak/../../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point_ldv-val-v0.8_false-unreach-call.cil.out.c [2018-11-22 22:15:48,119 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_d4d620cd-204f-496c-aebb-7f1e952d9a48/bin-2019/ukojak/data/39bf8f6ab/9bfdb7fece214598b36932b8354c3021/FLAG372e273e6 [2018-11-22 22:15:48,579 INFO L307 CDTParser]: Found 1 translation units. [2018-11-22 22:15:48,579 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_d4d620cd-204f-496c-aebb-7f1e952d9a48/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point_ldv-val-v0.8_false-unreach-call.cil.out.c [2018-11-22 22:15:48,591 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_d4d620cd-204f-496c-aebb-7f1e952d9a48/bin-2019/ukojak/data/39bf8f6ab/9bfdb7fece214598b36932b8354c3021/FLAG372e273e6 [2018-11-22 22:15:49,098 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_d4d620cd-204f-496c-aebb-7f1e952d9a48/bin-2019/ukojak/data/39bf8f6ab/9bfdb7fece214598b36932b8354c3021 [2018-11-22 22:15:49,100 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-22 22:15:49,101 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-22 22:15:49,102 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-22 22:15:49,102 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-22 22:15:49,104 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-22 22:15:49,105 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.11 10:15:49" (1/1) ... [2018-11-22 22:15:49,107 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2659c504 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:15:49, skipping insertion in model container [2018-11-22 22:15:49,107 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.11 10:15:49" (1/1) ... [2018-11-22 22:15:49,113 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-22 22:15:49,151 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-22 22:15:49,443 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-22 22:15:49,506 INFO L191 MainTranslator]: Completed pre-run [2018-11-22 22:15:49,584 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-22 22:15:49,615 INFO L195 MainTranslator]: Completed translation [2018-11-22 22:15:49,615 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:15:49 WrapperNode [2018-11-22 22:15:49,615 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-22 22:15:49,616 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-22 22:15:49,616 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-22 22:15:49,616 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-22 22:15:49,623 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:15:49" (1/1) ... [2018-11-22 22:15:49,640 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:15:49" (1/1) ... [2018-11-22 22:15:49,668 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-22 22:15:49,668 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-22 22:15:49,669 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-22 22:15:49,669 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-22 22:15:49,677 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:15:49" (1/1) ... [2018-11-22 22:15:49,677 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:15:49" (1/1) ... [2018-11-22 22:15:49,682 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:15:49" (1/1) ... [2018-11-22 22:15:49,683 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:15:49" (1/1) ... [2018-11-22 22:15:49,698 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:15:49" (1/1) ... [2018-11-22 22:15:49,701 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:15:49" (1/1) ... [2018-11-22 22:15:49,705 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:15:49" (1/1) ... [2018-11-22 22:15:49,709 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-22 22:15:49,709 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-22 22:15:49,710 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-22 22:15:49,710 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-22 22:15:49,710 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:15:49" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_d4d620cd-204f-496c-aebb-7f1e952d9a48/bin-2019/ukojak/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 [2018-11-22 22:15:49,762 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_hwmon_remove_raw [2018-11-22 22:15:49,762 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_hwmon_remove_raw [2018-11-22 22:15:49,763 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_hwmon_probe [2018-11-22 22:15:49,763 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_hwmon_probe [2018-11-22 22:15:49,763 INFO L130 BoogieDeclarations]: Found specification of procedure dev_get_drvdata [2018-11-22 22:15:49,763 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2018-11-22 22:15:49,763 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2018-11-22 22:15:49,763 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-22 22:15:49,763 INFO L130 BoogieDeclarations]: Found specification of procedure platform_driver_unregister [2018-11-22 22:15:49,763 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-22 22:15:49,763 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2018-11-22 22:15:49,764 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2018-11-22 22:15:49,764 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2018-11-22 22:15:49,764 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2018-11-22 22:15:49,764 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2018-11-22 22:15:49,764 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-22 22:15:49,764 INFO L130 BoogieDeclarations]: Found specification of procedure hwmon_device_register [2018-11-22 22:15:49,764 INFO L130 BoogieDeclarations]: Found specification of procedure platform_driver_register [2018-11-22 22:15:49,764 INFO L130 BoogieDeclarations]: Found specification of procedure PTR_ERR [2018-11-22 22:15:49,765 INFO L138 BoogieDeclarations]: Found implementation of procedure PTR_ERR [2018-11-22 22:15:49,765 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err [2018-11-22 22:15:49,765 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err [2018-11-22 22:15:49,765 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_adc_register [2018-11-22 22:15:49,765 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_hwmon_remove_attr [2018-11-22 22:15:49,765 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_hwmon_remove_attr [2018-11-22 22:15:49,765 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2018-11-22 22:15:49,765 INFO L130 BoogieDeclarations]: Found specification of procedure dev_set_drvdata [2018-11-22 22:15:49,765 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-22 22:15:49,765 INFO L130 BoogieDeclarations]: Found specification of procedure platform_get_drvdata [2018-11-22 22:15:49,766 INFO L138 BoogieDeclarations]: Found implementation of procedure platform_get_drvdata [2018-11-22 22:15:49,766 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2018-11-22 22:15:49,766 INFO L130 BoogieDeclarations]: Found specification of procedure hwmon_device_unregister [2018-11-22 22:15:49,766 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2018-11-22 22:15:49,766 INFO L130 BoogieDeclarations]: Found specification of procedure __mutex_init [2018-11-22 22:15:49,766 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_adc_release [2018-11-22 22:15:49,766 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-11-22 22:15:49,766 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_hwmon_remove [2018-11-22 22:15:49,766 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_hwmon_remove [2018-11-22 22:15:49,767 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_final_state [2018-11-22 22:15:49,767 INFO L130 BoogieDeclarations]: Found specification of procedure device_remove_file [2018-11-22 22:15:49,767 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-22 22:15:49,767 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-22 22:15:49,767 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_device_create_file [2018-11-22 22:15:49,767 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_device_create_file [2018-11-22 22:15:49,767 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2018-11-22 22:15:49,767 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2018-11-22 22:15:50,599 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-22 22:15:50,599 INFO L280 CfgBuilder]: Removed 34 assue(true) statements. [2018-11-22 22:15:50,599 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.11 10:15:50 BoogieIcfgContainer [2018-11-22 22:15:50,600 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-22 22:15:50,600 INFO L113 PluginConnector]: ------------------------CodeCheck---------------------------- [2018-11-22 22:15:50,600 INFO L271 PluginConnector]: Initializing CodeCheck... [2018-11-22 22:15:50,607 INFO L276 PluginConnector]: CodeCheck initialized [2018-11-22 22:15:50,608 INFO L185 PluginConnector]: Executing the observer CodeCheckObserver from plugin CodeCheck for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.11 10:15:50" (1/1) ... [2018-11-22 22:15:50,616 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:15:50,636 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-22 22:15:50,644 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 155 states to 115 states and 155 transitions. [2018-11-22 22:15:50,644 INFO L276 IsEmpty]: Start isEmpty. Operand 115 states and 155 transitions. [2018-11-22 22:15:50,650 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2018-11-22 22:15:50,650 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-22 22:15:50,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:15:50,822 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2018-11-22 22:15:50,895 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-22 22:15:50,897 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 167 states to 118 states and 167 transitions. [2018-11-22 22:15:50,897 INFO L276 IsEmpty]: Start isEmpty. Operand 118 states and 167 transitions. [2018-11-22 22:15:50,899 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2018-11-22 22:15:50,899 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-22 22:15:50,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:15:50,983 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2018-11-22 22:15:51,087 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-22 22:15:51,089 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 183 states to 122 states and 183 transitions. [2018-11-22 22:15:51,089 INFO L276 IsEmpty]: Start isEmpty. Operand 122 states and 183 transitions. [2018-11-22 22:15:51,092 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2018-11-22 22:15:51,093 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-22 22:15:51,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:15:51,153 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2018-11-22 22:15:51,185 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-22 22:15:51,186 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 179 states to 121 states and 179 transitions. [2018-11-22 22:15:51,187 INFO L276 IsEmpty]: Start isEmpty. Operand 121 states and 179 transitions. [2018-11-22 22:15:51,188 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2018-11-22 22:15:51,188 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-22 22:15:51,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:15:51,228 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-22 22:15:51,275 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-22 22:15:51,276 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 186 states to 125 states and 186 transitions. [2018-11-22 22:15:51,276 INFO L276 IsEmpty]: Start isEmpty. Operand 125 states and 186 transitions. [2018-11-22 22:15:51,280 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2018-11-22 22:15:51,280 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-22 22:15:51,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:15:51,316 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-22 22:15:51,332 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-22 22:15:51,333 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 186 states to 126 states and 186 transitions. [2018-11-22 22:15:51,333 INFO L276 IsEmpty]: Start isEmpty. Operand 126 states and 186 transitions. [2018-11-22 22:15:51,334 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2018-11-22 22:15:51,334 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-22 22:15:51,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:15:51,387 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2018-11-22 22:15:51,422 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-22 22:15:51,422 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 191 states to 129 states and 191 transitions. [2018-11-22 22:15:51,423 INFO L276 IsEmpty]: Start isEmpty. Operand 129 states and 191 transitions. [2018-11-22 22:15:51,424 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2018-11-22 22:15:51,424 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-22 22:15:51,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:15:51,470 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2018-11-22 22:15:51,495 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-22 22:15:51,496 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 187 states to 128 states and 187 transitions. [2018-11-22 22:15:51,496 INFO L276 IsEmpty]: Start isEmpty. Operand 128 states and 187 transitions. [2018-11-22 22:15:51,497 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2018-11-22 22:15:51,497 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-22 22:15:51,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:15:51,615 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-22 22:15:51,706 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-22 22:15:51,707 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 189 states to 130 states and 189 transitions. [2018-11-22 22:15:51,707 INFO L276 IsEmpty]: Start isEmpty. Operand 130 states and 189 transitions. [2018-11-22 22:15:51,708 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2018-11-22 22:15:51,708 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-22 22:15:51,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-22 22:15:51,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-22 22:15:52,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-22 22:15:52,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-22 22:15:52,442 WARN L493 CodeCheckObserver]: This program is UNSAFE, Check terminated with 9 iterations. ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(60, #t~string52.base, #t~string52.offset, 1);call write~init~int(55, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(62, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(20);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(4);call write~init~int(37, #t~string65.base, #t~string65.offset, 1);call write~init~int(100, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(10, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 3 + #t~string65.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(37, #t~string70.base, #t~string70.offset, 1);call write~init~int(115, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(10, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(11);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(34);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(11);call #t~string82.base, #t~string82.offset := #Ultimate.alloc(34);call #t~string85.base, #t~string85.offset := #Ultimate.alloc(27);call #t~string88.base, #t~string88.offset := #Ultimate.alloc(11);call #t~string89.base, #t~string89.offset := #Ultimate.alloc(13);call #t~string94.base, #t~string94.offset := #Ultimate.alloc(21);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(30);call #t~string108.base, #t~string108.offset := #Ultimate.alloc(33);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(25);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(27);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(10);~LDV_IN_INTERRUPT~0 := 1;~ref_cnt~0 := 0;~ldv_state_variable_1~0 := 0;~probed_1~0 := 0;~ldv_state_variable_0~0 := 0;~ldv_retval_0~0 := 0;~ldv_retval_1~0 := 0;~ldv_retval_2~0 := 0;~ldv_count_1~0 := 0;~ldv_count_2~0 := 0;~s3c_hwmon_driver_group1~0.base, ~s3c_hwmon_driver_group1~0.offset := 0, 0;call ~#s3c_hwmon_driver~0.base, ~#s3c_hwmon_driver~0.offset := #Ultimate.alloc(153);call write~init~$Pointer$(#funAddr~s3c_hwmon_probe.base, #funAddr~s3c_hwmon_probe.offset, ~#s3c_hwmon_driver~0.base, ~#s3c_hwmon_driver~0.offset, 8);call write~init~$Pointer$(#funAddr~s3c_hwmon_remove.base, #funAddr~s3c_hwmon_remove.offset, ~#s3c_hwmon_driver~0.base, 8 + ~#s3c_hwmon_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 16 + ~#s3c_hwmon_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 24 + ~#s3c_hwmon_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 32 + ~#s3c_hwmon_driver~0.offset, 8);call write~init~$Pointer$(#t~string121.base, #t~string121.offset, ~#s3c_hwmon_driver~0.base, 40 + ~#s3c_hwmon_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 48 + ~#s3c_hwmon_driver~0.offset, 8);call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#s3c_hwmon_driver~0.base, 56 + ~#s3c_hwmon_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 64 + ~#s3c_hwmon_driver~0.offset, 8);call write~init~int(0, ~#s3c_hwmon_driver~0.base, 72 + ~#s3c_hwmon_driver~0.offset, 1);call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 73 + ~#s3c_hwmon_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 81 + ~#s3c_hwmon_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 89 + ~#s3c_hwmon_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 97 + ~#s3c_hwmon_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 105 + ~#s3c_hwmon_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 113 + ~#s3c_hwmon_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 121 + ~#s3c_hwmon_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 129 + ~#s3c_hwmon_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 137 + ~#s3c_hwmon_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 145 + ~#s3c_hwmon_driver~0.offset, 8);havoc main_#res;havoc main_#t~nondet126, main_#t~switch127, main_#t~nondet128, main_#t~switch129, main_#t~ret130, main_#t~ret131, main_#t~ret132, main_#t~nondet133, main_#t~switch134, main_#t~ret135, main_~tmp~14, main_~tmp___0~4, main_~tmp___1~1;havoc main_~tmp~14;havoc main_~tmp___0~4;havoc main_~tmp___1~1;~ldv_state_variable_1~0 := 0;~ref_cnt~0 := 0;~ldv_state_variable_0~0 := 1; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=0, ~s3c_hwmon_driver_group1~0.offset=0] [?] assume -2147483648 <= main_#t~nondet126 && main_#t~nondet126 <= 2147483647;main_~tmp~14 := main_#t~nondet126;havoc main_#t~nondet126;main_#t~switch127 := 0 == main_~tmp~14; VAL [ULTIMATE.start_main_~tmp~14=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |ULTIMATE.start_main_#t~switch127|=false, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=0, ~s3c_hwmon_driver_group1~0.offset=0] [?] assume !main_#t~switch127;main_#t~switch127 := main_#t~switch127 || 1 == main_~tmp~14; VAL [ULTIMATE.start_main_~tmp~14=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |ULTIMATE.start_main_#t~switch127|=true, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=0, ~s3c_hwmon_driver_group1~0.offset=0] [?] assume main_#t~switch127; VAL [ULTIMATE.start_main_~tmp~14=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |ULTIMATE.start_main_#t~switch127|=true, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=0, ~s3c_hwmon_driver_group1~0.offset=0] [?] assume 0 != ~ldv_state_variable_0~0;assume -2147483648 <= main_#t~nondet133 && main_#t~nondet133 <= 2147483647;main_~tmp___1~1 := main_#t~nondet133;havoc main_#t~nondet133;main_#t~switch134 := 0 == main_~tmp___1~1; VAL [ULTIMATE.start_main_~tmp___1~1=1, ULTIMATE.start_main_~tmp~14=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |ULTIMATE.start_main_#t~switch127|=true, |ULTIMATE.start_main_#t~switch134|=false, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=0, ~s3c_hwmon_driver_group1~0.offset=0] [?] assume !main_#t~switch134;main_#t~switch134 := main_#t~switch134 || 1 == main_~tmp___1~1; VAL [ULTIMATE.start_main_~tmp___1~1=1, ULTIMATE.start_main_~tmp~14=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |ULTIMATE.start_main_#t~switch127|=true, |ULTIMATE.start_main_#t~switch134|=true, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=0, ~s3c_hwmon_driver_group1~0.offset=0] [?] assume main_#t~switch134; VAL [ULTIMATE.start_main_~tmp___1~1=1, ULTIMATE.start_main_~tmp~14=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |ULTIMATE.start_main_#t~switch127|=true, |ULTIMATE.start_main_#t~switch134|=true, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=0, ~s3c_hwmon_driver_group1~0.offset=0] [?] assume 1 == ~ldv_state_variable_0~0;havoc s3c_hwmon_init_#res;havoc s3c_hwmon_init_#t~ret122, s3c_hwmon_init_~tmp~12;havoc s3c_hwmon_init_~tmp~12;call s3c_hwmon_init_#t~ret122 := platform_driver_register(~#s3c_hwmon_driver~0.base, ~#s3c_hwmon_driver~0.offset);assume -2147483648 <= s3c_hwmon_init_#t~ret122 && s3c_hwmon_init_#t~ret122 <= 2147483647;s3c_hwmon_init_~tmp~12 := s3c_hwmon_init_#t~ret122;havoc s3c_hwmon_init_#t~ret122;s3c_hwmon_init_#res := s3c_hwmon_init_~tmp~12;main_#t~ret135 := s3c_hwmon_init_#res;assume -2147483648 <= main_#t~ret135 && main_#t~ret135 <= 2147483647;~ldv_retval_2~0 := main_#t~ret135;havoc main_#t~ret135; VAL [ULTIMATE.start_main_~tmp___1~1=1, ULTIMATE.start_main_~tmp~14=1, ULTIMATE.start_s3c_hwmon_init_~tmp~12=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |ULTIMATE.start_main_#t~switch127|=true, |ULTIMATE.start_main_#t~switch134|=true, |ULTIMATE.start_s3c_hwmon_init_#res|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=0, ~s3c_hwmon_driver_group1~0.offset=0] [?] assume !(0 != ~ldv_retval_2~0);BeginParallelComposition{ParallelCodeBlock0: assume !(0 == ~ldv_retval_2~0);ParallelCodeBlock1: assume 0 == ~ldv_retval_2~0;~ldv_state_variable_0~0 := 2;~ldv_state_variable_1~0 := 1;havoc ldv_platform_driver_init_1_#t~ret125.base, ldv_platform_driver_init_1_#t~ret125.offset, ldv_platform_driver_init_1_~tmp~13.base, ldv_platform_driver_init_1_~tmp~13.offset;havoc ldv_platform_driver_init_1_~tmp~13.base, ldv_platform_driver_init_1_~tmp~13.offset;ldv_malloc_#in~size := 624;havoc ldv_malloc_#res.base, ldv_malloc_#res.offset;havoc ldv_malloc_#t~nondet29, ldv_malloc_#t~malloc30.base, ldv_malloc_#t~malloc30.offset, ldv_malloc_~size, ldv_malloc_~p~0.base, ldv_malloc_~p~0.offset, ldv_malloc_~tmp~0.base, ldv_malloc_~tmp~0.offset, ldv_malloc_~tmp___0~0;ldv_malloc_~size := ldv_malloc_#in~size;havoc ldv_malloc_~p~0.base, ldv_malloc_~p~0.offset;havoc ldv_malloc_~tmp~0.base, ldv_malloc_~tmp~0.offset;havoc ldv_malloc_~tmp___0~0;assume -2147483648 <= ldv_malloc_#t~nondet29 && ldv_malloc_#t~nondet29 <= 2147483647;ldv_malloc_~tmp___0~0 := ldv_malloc_#t~nondet29;havoc ldv_malloc_#t~nondet29;BeginParallelComposition{ParallelCodeBlock0: assume 0 != ldv_malloc_~tmp___0~0;ldv_malloc_#res.base, ldv_malloc_#res.offset := 0, 0;ParallelCodeBlock1: assume !(0 != ldv_malloc_~tmp___0~0);call ldv_malloc_#t~malloc30.base, ldv_malloc_#t~malloc30.offset := #Ultimate.alloc(ldv_malloc_~size);ldv_malloc_~tmp~0.base, ldv_malloc_~tmp~0.offset := ldv_malloc_#t~malloc30.base, ldv_malloc_#t~malloc30.offset;ldv_malloc_~p~0.base, ldv_malloc_~p~0.offset := ldv_malloc_~tmp~0.base, ldv_malloc_~tmp~0.offset;assume 0 != (if 0 != (ldv_malloc_~p~0.base + ldv_malloc_~p~0.offset) % 18446744073709551616 then 1 else 0);ldv_malloc_#res.base, ldv_malloc_#res.offset := ldv_malloc_~p~0.base, ldv_malloc_~p~0.offset;}EndParallelCompositionldv_platform_driver_init_1_#t~ret125.base, ldv_platform_driver_init_1_#t~ret125.offset := ldv_malloc_#res.base, ldv_malloc_#res.offset;ldv_platform_driver_init_1_~tmp~13.base, ldv_platform_driver_init_1_~tmp~13.offset := ldv_platform_driver_init_1_#t~ret125.base, ldv_platform_driver_init_1_#t~ret125.offset;havoc ldv_platform_driver_init_1_#t~ret125.base, ldv_platform_driver_init_1_#t~ret125.offset;assume 0 != (if 0 != (ldv_platform_driver_init_1_~tmp~13.base + ldv_platform_driver_init_1_~tmp~13.offset) % 18446744073709551616 then 1 else 0);~s3c_hwmon_driver_group1~0.base, ~s3c_hwmon_driver_group1~0.offset := ldv_platform_driver_init_1_~tmp~13.base, ldv_platform_driver_init_1_~tmp~13.offset;}EndParallelComposition VAL [ULTIMATE.start_ldv_malloc_~p~0.base=18446744073709551615, ULTIMATE.start_ldv_malloc_~p~0.offset=0, ULTIMATE.start_ldv_malloc_~size=624, ULTIMATE.start_ldv_malloc_~tmp___0~0=0, ULTIMATE.start_ldv_malloc_~tmp~0.base=18446744073709551615, ULTIMATE.start_ldv_malloc_~tmp~0.offset=0, ULTIMATE.start_ldv_platform_driver_init_1_~tmp~13.base=18446744073709551615, ULTIMATE.start_ldv_platform_driver_init_1_~tmp~13.offset=0, ULTIMATE.start_main_~tmp___1~1=1, ULTIMATE.start_main_~tmp~14=1, ULTIMATE.start_s3c_hwmon_init_~tmp~12=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |ULTIMATE.start_ldv_malloc_#in~size|=624, |ULTIMATE.start_ldv_malloc_#res.base|=18446744073709551615, |ULTIMATE.start_ldv_malloc_#res.offset|=0, |ULTIMATE.start_ldv_malloc_#t~malloc30.base|=18446744073709551615, |ULTIMATE.start_ldv_malloc_#t~malloc30.offset|=0, |ULTIMATE.start_ldv_malloc_#t~nondet29|=0, |ULTIMATE.start_ldv_platform_driver_init_1_#t~ret125.base|=0, |ULTIMATE.start_ldv_platform_driver_init_1_#t~ret125.offset|=0, |ULTIMATE.start_main_#t~switch127|=true, |ULTIMATE.start_main_#t~switch134|=true, |ULTIMATE.start_s3c_hwmon_init_#res|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] assume -2147483648 <= main_#t~nondet126 && main_#t~nondet126 <= 2147483647;main_~tmp~14 := main_#t~nondet126;havoc main_#t~nondet126;main_#t~switch127 := 0 == main_~tmp~14; VAL [ULTIMATE.start_ldv_malloc_~p~0.base=18446744073709551615, ULTIMATE.start_ldv_malloc_~p~0.offset=0, ULTIMATE.start_ldv_malloc_~size=624, ULTIMATE.start_ldv_malloc_~tmp___0~0=0, ULTIMATE.start_ldv_malloc_~tmp~0.base=18446744073709551615, ULTIMATE.start_ldv_malloc_~tmp~0.offset=0, ULTIMATE.start_ldv_platform_driver_init_1_~tmp~13.base=18446744073709551615, ULTIMATE.start_ldv_platform_driver_init_1_~tmp~13.offset=0, ULTIMATE.start_main_~tmp___1~1=1, ULTIMATE.start_main_~tmp~14=0, ULTIMATE.start_s3c_hwmon_init_~tmp~12=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |ULTIMATE.start_ldv_malloc_#in~size|=624, |ULTIMATE.start_ldv_malloc_#res.base|=18446744073709551615, |ULTIMATE.start_ldv_malloc_#res.offset|=0, |ULTIMATE.start_ldv_malloc_#t~malloc30.base|=18446744073709551615, |ULTIMATE.start_ldv_malloc_#t~malloc30.offset|=0, |ULTIMATE.start_ldv_malloc_#t~nondet29|=0, |ULTIMATE.start_ldv_platform_driver_init_1_#t~ret125.base|=0, |ULTIMATE.start_ldv_platform_driver_init_1_#t~ret125.offset|=0, |ULTIMATE.start_main_#t~switch127|=true, |ULTIMATE.start_main_#t~switch134|=true, |ULTIMATE.start_s3c_hwmon_init_#res|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] assume main_#t~switch127; VAL [ULTIMATE.start_ldv_malloc_~p~0.base=18446744073709551615, ULTIMATE.start_ldv_malloc_~p~0.offset=0, ULTIMATE.start_ldv_malloc_~size=624, ULTIMATE.start_ldv_malloc_~tmp___0~0=0, ULTIMATE.start_ldv_malloc_~tmp~0.base=18446744073709551615, ULTIMATE.start_ldv_malloc_~tmp~0.offset=0, ULTIMATE.start_ldv_platform_driver_init_1_~tmp~13.base=18446744073709551615, ULTIMATE.start_ldv_platform_driver_init_1_~tmp~13.offset=0, ULTIMATE.start_main_~tmp___1~1=1, ULTIMATE.start_main_~tmp~14=0, ULTIMATE.start_s3c_hwmon_init_~tmp~12=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |ULTIMATE.start_ldv_malloc_#in~size|=624, |ULTIMATE.start_ldv_malloc_#res.base|=18446744073709551615, |ULTIMATE.start_ldv_malloc_#res.offset|=0, |ULTIMATE.start_ldv_malloc_#t~malloc30.base|=18446744073709551615, |ULTIMATE.start_ldv_malloc_#t~malloc30.offset|=0, |ULTIMATE.start_ldv_malloc_#t~nondet29|=0, |ULTIMATE.start_ldv_platform_driver_init_1_#t~ret125.base|=0, |ULTIMATE.start_ldv_platform_driver_init_1_#t~ret125.offset|=0, |ULTIMATE.start_main_#t~switch127|=true, |ULTIMATE.start_main_#t~switch134|=true, |ULTIMATE.start_s3c_hwmon_init_#res|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] assume 0 != ~ldv_state_variable_1~0;assume -2147483648 <= main_#t~nondet128 && main_#t~nondet128 <= 2147483647;main_~tmp___0~4 := main_#t~nondet128;havoc main_#t~nondet128;main_#t~switch129 := 0 == main_~tmp___0~4; VAL [ULTIMATE.start_ldv_malloc_~p~0.base=18446744073709551615, ULTIMATE.start_ldv_malloc_~p~0.offset=0, ULTIMATE.start_ldv_malloc_~size=624, ULTIMATE.start_ldv_malloc_~tmp___0~0=0, ULTIMATE.start_ldv_malloc_~tmp~0.base=18446744073709551615, ULTIMATE.start_ldv_malloc_~tmp~0.offset=0, ULTIMATE.start_ldv_platform_driver_init_1_~tmp~13.base=18446744073709551615, ULTIMATE.start_ldv_platform_driver_init_1_~tmp~13.offset=0, ULTIMATE.start_main_~tmp___0~4=0, ULTIMATE.start_main_~tmp___1~1=1, ULTIMATE.start_main_~tmp~14=0, ULTIMATE.start_s3c_hwmon_init_~tmp~12=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |ULTIMATE.start_ldv_malloc_#in~size|=624, |ULTIMATE.start_ldv_malloc_#res.base|=18446744073709551615, |ULTIMATE.start_ldv_malloc_#res.offset|=0, |ULTIMATE.start_ldv_malloc_#t~malloc30.base|=18446744073709551615, |ULTIMATE.start_ldv_malloc_#t~malloc30.offset|=0, |ULTIMATE.start_ldv_malloc_#t~nondet29|=0, |ULTIMATE.start_ldv_platform_driver_init_1_#t~ret125.base|=0, |ULTIMATE.start_ldv_platform_driver_init_1_#t~ret125.offset|=0, |ULTIMATE.start_main_#t~switch127|=true, |ULTIMATE.start_main_#t~switch129|=true, |ULTIMATE.start_main_#t~switch134|=true, |ULTIMATE.start_s3c_hwmon_init_#res|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] assume main_#t~switch129; VAL [ULTIMATE.start_ldv_malloc_~p~0.base=18446744073709551615, ULTIMATE.start_ldv_malloc_~p~0.offset=0, ULTIMATE.start_ldv_malloc_~size=624, ULTIMATE.start_ldv_malloc_~tmp___0~0=0, ULTIMATE.start_ldv_malloc_~tmp~0.base=18446744073709551615, ULTIMATE.start_ldv_malloc_~tmp~0.offset=0, ULTIMATE.start_ldv_platform_driver_init_1_~tmp~13.base=18446744073709551615, ULTIMATE.start_ldv_platform_driver_init_1_~tmp~13.offset=0, ULTIMATE.start_main_~tmp___0~4=0, ULTIMATE.start_main_~tmp___1~1=1, ULTIMATE.start_main_~tmp~14=0, ULTIMATE.start_s3c_hwmon_init_~tmp~12=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |ULTIMATE.start_ldv_malloc_#in~size|=624, |ULTIMATE.start_ldv_malloc_#res.base|=18446744073709551615, |ULTIMATE.start_ldv_malloc_#res.offset|=0, |ULTIMATE.start_ldv_malloc_#t~malloc30.base|=18446744073709551615, |ULTIMATE.start_ldv_malloc_#t~malloc30.offset|=0, |ULTIMATE.start_ldv_malloc_#t~nondet29|=0, |ULTIMATE.start_ldv_platform_driver_init_1_#t~ret125.base|=0, |ULTIMATE.start_ldv_platform_driver_init_1_#t~ret125.offset|=0, |ULTIMATE.start_main_#t~switch127|=true, |ULTIMATE.start_main_#t~switch129|=true, |ULTIMATE.start_main_#t~switch134|=true, |ULTIMATE.start_s3c_hwmon_init_#res|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] assume 1 == ~ldv_state_variable_1~0; VAL [ULTIMATE.start_ldv_malloc_~p~0.base=18446744073709551615, ULTIMATE.start_ldv_malloc_~p~0.offset=0, ULTIMATE.start_ldv_malloc_~size=624, ULTIMATE.start_ldv_malloc_~tmp___0~0=0, ULTIMATE.start_ldv_malloc_~tmp~0.base=18446744073709551615, ULTIMATE.start_ldv_malloc_~tmp~0.offset=0, ULTIMATE.start_ldv_platform_driver_init_1_~tmp~13.base=18446744073709551615, ULTIMATE.start_ldv_platform_driver_init_1_~tmp~13.offset=0, ULTIMATE.start_main_~tmp___0~4=0, ULTIMATE.start_main_~tmp___1~1=1, ULTIMATE.start_main_~tmp~14=0, ULTIMATE.start_s3c_hwmon_init_~tmp~12=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |ULTIMATE.start_ldv_malloc_#in~size|=624, |ULTIMATE.start_ldv_malloc_#res.base|=18446744073709551615, |ULTIMATE.start_ldv_malloc_#res.offset|=0, |ULTIMATE.start_ldv_malloc_#t~malloc30.base|=18446744073709551615, |ULTIMATE.start_ldv_malloc_#t~malloc30.offset|=0, |ULTIMATE.start_ldv_malloc_#t~nondet29|=0, |ULTIMATE.start_ldv_platform_driver_init_1_#t~ret125.base|=0, |ULTIMATE.start_ldv_platform_driver_init_1_#t~ret125.offset|=0, |ULTIMATE.start_main_#t~switch127|=true, |ULTIMATE.start_main_#t~switch129|=true, |ULTIMATE.start_main_#t~switch134|=true, |ULTIMATE.start_s3c_hwmon_init_#res|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] CALL call main_#t~ret130 := s3c_hwmon_probe(~s3c_hwmon_driver_group1~0.base, ~s3c_hwmon_driver_group1~0.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |old(~ldv_count_2~0)|=0, |s3c_hwmon_probe_#in~dev.base|=18446744073709551615, |s3c_hwmon_probe_#in~dev.offset|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset;havoc ~pdata~2.base, ~pdata~2.offset;havoc ~hwmon~1.base, ~hwmon~1.offset;havoc ~ret~3;havoc ~i~0;havoc ~tmp~10.base, ~tmp~10.offset;call ~#__key~0.base, ~#__key~0.offset := #Ultimate.alloc(8);havoc ~tmp___0~3;havoc ~tmp___1~0;havoc ~tmp___2~0;havoc ~tmp___3~0;havoc ~cfg~2.base, ~cfg~2.offset;call #t~mem83.base, #t~mem83.offset := read~$Pointer$(~dev.base, 277 + ~dev.offset, 8);~pdata~2.base, ~pdata~2.offset := #t~mem83.base, #t~mem83.offset;havoc #t~mem83.base, #t~mem83.offset;~ret~3 := 0; VAL [s3c_hwmon_probe_~dev.base=18446744073709551615, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~pdata~2.base=12376, s3c_hwmon_probe_~pdata~2.offset=(- 143312754708649506517079), s3c_hwmon_probe_~ret~3=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |old(~ldv_count_2~0)|=0, |s3c_hwmon_probe_#in~dev.base|=18446744073709551615, |s3c_hwmon_probe_#in~dev.offset|=0, |s3c_hwmon_probe_~#__key~0.base|=52, |s3c_hwmon_probe_~#__key~0.offset|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] assume !(0 == (~pdata~2.base + ~pdata~2.offset) % 18446744073709551616);ldv_kzalloc_9_#in~size, ldv_kzalloc_9_#in~flags := 800, 208;havoc ldv_kzalloc_9_#res.base, ldv_kzalloc_9_#res.offset;havoc ldv_kzalloc_9_#t~ret140.base, ldv_kzalloc_9_#t~ret140.offset, ldv_kzalloc_9_~size, ldv_kzalloc_9_~flags, ldv_kzalloc_9_~tmp~19.base, ldv_kzalloc_9_~tmp~19.offset;ldv_kzalloc_9_~size := ldv_kzalloc_9_#in~size;ldv_kzalloc_9_~flags := ldv_kzalloc_9_#in~flags;havoc ldv_kzalloc_9_~tmp~19.base, ldv_kzalloc_9_~tmp~19.offset;ldv_zalloc_#in~size := ldv_kzalloc_9_~size;havoc ldv_zalloc_#res.base, ldv_zalloc_#res.offset;havoc ldv_zalloc_#t~nondet31, ldv_zalloc_#t~malloc32.base, ldv_zalloc_#t~malloc32.offset, ldv_zalloc_~size, ldv_zalloc_~p~1.base, ldv_zalloc_~p~1.offset, ldv_zalloc_~tmp~1.base, ldv_zalloc_~tmp~1.offset, ldv_zalloc_~tmp___0~1;ldv_zalloc_~size := ldv_zalloc_#in~size;havoc ldv_zalloc_~p~1.base, ldv_zalloc_~p~1.offset;havoc ldv_zalloc_~tmp~1.base, ldv_zalloc_~tmp~1.offset;havoc ldv_zalloc_~tmp___0~1;assume -2147483648 <= ldv_zalloc_#t~nondet31 && ldv_zalloc_#t~nondet31 <= 2147483647;ldv_zalloc_~tmp___0~1 := ldv_zalloc_#t~nondet31;havoc ldv_zalloc_#t~nondet31; VAL [s3c_hwmon_probe_ldv_kzalloc_9_~flags=208, s3c_hwmon_probe_ldv_kzalloc_9_~size=800, s3c_hwmon_probe_ldv_zalloc_~size=800, s3c_hwmon_probe_ldv_zalloc_~tmp___0~1=0, s3c_hwmon_probe_~dev.base=18446744073709551615, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~pdata~2.base=12376, s3c_hwmon_probe_~pdata~2.offset=(- 143312754708649506517079), s3c_hwmon_probe_~ret~3=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |old(~ldv_count_2~0)|=0, |s3c_hwmon_probe_#in~dev.base|=18446744073709551615, |s3c_hwmon_probe_#in~dev.offset|=0, |s3c_hwmon_probe_ldv_kzalloc_9_#in~flags|=208, |s3c_hwmon_probe_ldv_kzalloc_9_#in~size|=800, |s3c_hwmon_probe_ldv_zalloc_#in~size|=800, |s3c_hwmon_probe_~#__key~0.base|=52, |s3c_hwmon_probe_~#__key~0.offset|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] assume !(0 != ldv_zalloc_~tmp___0~1);call ldv_zalloc_#t~malloc32.base, ldv_zalloc_#t~malloc32.offset := #Ultimate.alloc((if ldv_zalloc_~size % 4294967296 % 4294967296 <= 2147483647 then ldv_zalloc_~size % 4294967296 % 4294967296 else ldv_zalloc_~size % 4294967296 % 4294967296 - 4294967296)); VAL [s3c_hwmon_probe_ldv_kzalloc_9_~flags=208, s3c_hwmon_probe_ldv_kzalloc_9_~size=800, s3c_hwmon_probe_ldv_zalloc_~size=800, s3c_hwmon_probe_ldv_zalloc_~tmp___0~1=0, s3c_hwmon_probe_~dev.base=18446744073709551615, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~pdata~2.base=12376, s3c_hwmon_probe_~pdata~2.offset=(- 143312754708649506517079), s3c_hwmon_probe_~ret~3=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |old(~ldv_count_2~0)|=0, |s3c_hwmon_probe_#in~dev.base|=18446744073709551615, |s3c_hwmon_probe_#in~dev.offset|=0, |s3c_hwmon_probe_ldv_kzalloc_9_#in~flags|=208, |s3c_hwmon_probe_ldv_kzalloc_9_#in~size|=800, |s3c_hwmon_probe_ldv_zalloc_#in~size|=800, |s3c_hwmon_probe_ldv_zalloc_#t~malloc32.base|=5019, |s3c_hwmon_probe_ldv_zalloc_#t~malloc32.offset|=0, |s3c_hwmon_probe_~#__key~0.base|=52, |s3c_hwmon_probe_~#__key~0.offset|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] CALL call #Ultimate.meminit(ldv_zalloc_#t~malloc32.base, ldv_zalloc_#t~malloc32.offset, 1, (if ldv_zalloc_~size % 4294967296 % 4294967296 <= 2147483647 then ldv_zalloc_~size % 4294967296 % 4294967296 else ldv_zalloc_~size % 4294967296 % 4294967296 - 4294967296), (if ldv_zalloc_~size % 4294967296 % 4294967296 <= 2147483647 then ldv_zalloc_~size % 4294967296 % 4294967296 else ldv_zalloc_~size % 4294967296 % 4294967296 - 4294967296)); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |#Ultimate.meminit_#amountOfFields|=1, |#Ultimate.meminit_#product|=800, |#Ultimate.meminit_#ptr.base|=5019, |#Ultimate.meminit_#ptr.offset|=0, |#Ultimate.meminit_#sizeOfFields|=800, |old(~ldv_count_2~0)|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] #memory_int := ~initToZeroAtPointerBaseAddress~int(#memory_int, #ptr.base);assume true; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |#Ultimate.meminit_#amountOfFields|=1, |#Ultimate.meminit_#product|=800, |#Ultimate.meminit_#ptr.base|=5019, |#Ultimate.meminit_#ptr.offset|=0, |#Ultimate.meminit_#sizeOfFields|=800, |old(~ldv_count_2~0)|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] RET #351#return; VAL [s3c_hwmon_probe_ldv_kzalloc_9_~flags=208, s3c_hwmon_probe_ldv_kzalloc_9_~size=800, s3c_hwmon_probe_ldv_zalloc_~size=800, s3c_hwmon_probe_ldv_zalloc_~tmp___0~1=0, s3c_hwmon_probe_~dev.base=18446744073709551615, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~pdata~2.base=12376, s3c_hwmon_probe_~pdata~2.offset=(- 143312754708649506517079), s3c_hwmon_probe_~ret~3=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |old(~ldv_count_2~0)|=0, |s3c_hwmon_probe_#in~dev.base|=18446744073709551615, |s3c_hwmon_probe_#in~dev.offset|=0, |s3c_hwmon_probe_ldv_kzalloc_9_#in~flags|=208, |s3c_hwmon_probe_ldv_kzalloc_9_#in~size|=800, |s3c_hwmon_probe_ldv_zalloc_#in~size|=800, |s3c_hwmon_probe_ldv_zalloc_#t~malloc32.base|=5019, |s3c_hwmon_probe_ldv_zalloc_#t~malloc32.offset|=0, |s3c_hwmon_probe_~#__key~0.base|=52, |s3c_hwmon_probe_~#__key~0.offset|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] ldv_zalloc_~tmp~1.base, ldv_zalloc_~tmp~1.offset := ldv_zalloc_#t~malloc32.base, ldv_zalloc_#t~malloc32.offset;ldv_zalloc_~p~1.base, ldv_zalloc_~p~1.offset := ldv_zalloc_~tmp~1.base, ldv_zalloc_~tmp~1.offset;assume 0 != (if 0 != (ldv_zalloc_~p~1.base + ldv_zalloc_~p~1.offset) % 18446744073709551616 then 1 else 0);ldv_zalloc_#res.base, ldv_zalloc_#res.offset := ldv_zalloc_~p~1.base, ldv_zalloc_~p~1.offset; VAL [s3c_hwmon_probe_ldv_kzalloc_9_~flags=208, s3c_hwmon_probe_ldv_kzalloc_9_~size=800, s3c_hwmon_probe_ldv_zalloc_~p~1.base=5019, s3c_hwmon_probe_ldv_zalloc_~p~1.offset=0, s3c_hwmon_probe_ldv_zalloc_~size=800, s3c_hwmon_probe_ldv_zalloc_~tmp___0~1=0, s3c_hwmon_probe_ldv_zalloc_~tmp~1.base=5019, s3c_hwmon_probe_ldv_zalloc_~tmp~1.offset=0, s3c_hwmon_probe_~dev.base=18446744073709551615, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~pdata~2.base=12376, s3c_hwmon_probe_~pdata~2.offset=(- 143312754708649506517079), s3c_hwmon_probe_~ret~3=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |old(~ldv_count_2~0)|=0, |s3c_hwmon_probe_#in~dev.base|=18446744073709551615, |s3c_hwmon_probe_#in~dev.offset|=0, |s3c_hwmon_probe_ldv_kzalloc_9_#in~flags|=208, |s3c_hwmon_probe_ldv_kzalloc_9_#in~size|=800, |s3c_hwmon_probe_ldv_zalloc_#in~size|=800, |s3c_hwmon_probe_ldv_zalloc_#res.base|=5019, |s3c_hwmon_probe_ldv_zalloc_#res.offset|=0, |s3c_hwmon_probe_ldv_zalloc_#t~malloc32.base|=5019, |s3c_hwmon_probe_ldv_zalloc_#t~malloc32.offset|=0, |s3c_hwmon_probe_~#__key~0.base|=52, |s3c_hwmon_probe_~#__key~0.offset|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] ldv_kzalloc_9_#t~ret140.base, ldv_kzalloc_9_#t~ret140.offset := ldv_zalloc_#res.base, ldv_zalloc_#res.offset;ldv_kzalloc_9_~tmp~19.base, ldv_kzalloc_9_~tmp~19.offset := ldv_kzalloc_9_#t~ret140.base, ldv_kzalloc_9_#t~ret140.offset;havoc ldv_kzalloc_9_#t~ret140.base, ldv_kzalloc_9_#t~ret140.offset;ldv_kzalloc_9_#res.base, ldv_kzalloc_9_#res.offset := ldv_kzalloc_9_~tmp~19.base, ldv_kzalloc_9_~tmp~19.offset;#t~ret86.base, #t~ret86.offset := ldv_kzalloc_9_#res.base, ldv_kzalloc_9_#res.offset;~tmp~10.base, ~tmp~10.offset := #t~ret86.base, #t~ret86.offset;havoc #t~ret86.base, #t~ret86.offset;~hwmon~1.base, ~hwmon~1.offset := ~tmp~10.base, ~tmp~10.offset; VAL [s3c_hwmon_probe_ldv_kzalloc_9_~flags=208, s3c_hwmon_probe_ldv_kzalloc_9_~size=800, s3c_hwmon_probe_ldv_kzalloc_9_~tmp~19.base=5019, s3c_hwmon_probe_ldv_kzalloc_9_~tmp~19.offset=0, s3c_hwmon_probe_ldv_zalloc_~p~1.base=5019, s3c_hwmon_probe_ldv_zalloc_~p~1.offset=0, s3c_hwmon_probe_ldv_zalloc_~size=800, s3c_hwmon_probe_ldv_zalloc_~tmp___0~1=0, s3c_hwmon_probe_ldv_zalloc_~tmp~1.base=5019, s3c_hwmon_probe_ldv_zalloc_~tmp~1.offset=0, s3c_hwmon_probe_~dev.base=18446744073709551615, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=5019, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~pdata~2.base=12376, s3c_hwmon_probe_~pdata~2.offset=(- 143312754708649506517079), s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp~10.base=5019, s3c_hwmon_probe_~tmp~10.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |old(~ldv_count_2~0)|=0, |s3c_hwmon_probe_#in~dev.base|=18446744073709551615, |s3c_hwmon_probe_#in~dev.offset|=0, |s3c_hwmon_probe_ldv_kzalloc_9_#in~flags|=208, |s3c_hwmon_probe_ldv_kzalloc_9_#in~size|=800, |s3c_hwmon_probe_ldv_kzalloc_9_#res.base|=5019, |s3c_hwmon_probe_ldv_kzalloc_9_#res.offset|=0, |s3c_hwmon_probe_ldv_zalloc_#in~size|=800, |s3c_hwmon_probe_ldv_zalloc_#res.base|=5019, |s3c_hwmon_probe_ldv_zalloc_#res.offset|=0, |s3c_hwmon_probe_ldv_zalloc_#t~malloc32.base|=5019, |s3c_hwmon_probe_ldv_zalloc_#t~malloc32.offset|=0, |s3c_hwmon_probe_~#__key~0.base|=52, |s3c_hwmon_probe_~#__key~0.offset|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] assume !(0 == (~hwmon~1.base + ~hwmon~1.offset) % 18446744073709551616);platform_set_drvdata_#in~pdev.base, platform_set_drvdata_#in~pdev.offset, platform_set_drvdata_#in~data.base, platform_set_drvdata_#in~data.offset := ~dev.base, ~dev.offset, ~hwmon~1.base, ~hwmon~1.offset;havoc platform_set_drvdata_~pdev.base, platform_set_drvdata_~pdev.offset, platform_set_drvdata_~data.base, platform_set_drvdata_~data.offset;platform_set_drvdata_~pdev.base, platform_set_drvdata_~pdev.offset := platform_set_drvdata_#in~pdev.base, platform_set_drvdata_#in~pdev.offset;platform_set_drvdata_~data.base, platform_set_drvdata_~data.offset := platform_set_drvdata_#in~data.base, platform_set_drvdata_#in~data.offset;call dev_set_drvdata(platform_set_drvdata_~pdev.base, 12 + platform_set_drvdata_~pdev.offset, platform_set_drvdata_~data.base, platform_set_drvdata_~data.offset);call __mutex_init(~hwmon~1.base, ~hwmon~1.offset, #t~string89.base, #t~string89.offset, ~#__key~0.base, ~#__key~0.offset);call #t~ret90.base, #t~ret90.offset := s3c_adc_register(~dev.base, ~dev.offset, 0, 0, 0, 0, 0);call write~$Pointer$(#t~ret90.base, #t~ret90.offset, ~hwmon~1.base, 152 + ~hwmon~1.offset, 8);havoc #t~ret90.base, #t~ret90.offset;call #t~mem91.base, #t~mem91.offset := read~$Pointer$(~hwmon~1.base, 152 + ~hwmon~1.offset, 8); VAL [s3c_hwmon_probe_ldv_kzalloc_9_~flags=208, s3c_hwmon_probe_ldv_kzalloc_9_~size=800, s3c_hwmon_probe_ldv_kzalloc_9_~tmp~19.base=5019, s3c_hwmon_probe_ldv_kzalloc_9_~tmp~19.offset=0, s3c_hwmon_probe_ldv_zalloc_~p~1.base=5019, s3c_hwmon_probe_ldv_zalloc_~p~1.offset=0, s3c_hwmon_probe_ldv_zalloc_~size=800, s3c_hwmon_probe_ldv_zalloc_~tmp___0~1=0, s3c_hwmon_probe_ldv_zalloc_~tmp~1.base=5019, s3c_hwmon_probe_ldv_zalloc_~tmp~1.offset=0, s3c_hwmon_probe_platform_set_drvdata_~data.base=5019, s3c_hwmon_probe_platform_set_drvdata_~data.offset=0, s3c_hwmon_probe_platform_set_drvdata_~pdev.base=18446744073709551615, s3c_hwmon_probe_platform_set_drvdata_~pdev.offset=0, s3c_hwmon_probe_~dev.base=18446744073709551615, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=5019, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~pdata~2.base=12376, s3c_hwmon_probe_~pdata~2.offset=(- 143312754708649506517079), s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp~10.base=5019, s3c_hwmon_probe_~tmp~10.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |old(~ldv_count_2~0)|=0, |s3c_hwmon_probe_#in~dev.base|=18446744073709551615, |s3c_hwmon_probe_#in~dev.offset|=0, |s3c_hwmon_probe_#t~mem91.base|=18446744073709551616, |s3c_hwmon_probe_#t~mem91.offset|=(- 18446744073709551616), |s3c_hwmon_probe_ldv_kzalloc_9_#in~flags|=208, |s3c_hwmon_probe_ldv_kzalloc_9_#in~size|=800, |s3c_hwmon_probe_ldv_kzalloc_9_#res.base|=5019, |s3c_hwmon_probe_ldv_kzalloc_9_#res.offset|=0, |s3c_hwmon_probe_ldv_zalloc_#in~size|=800, |s3c_hwmon_probe_ldv_zalloc_#res.base|=5019, |s3c_hwmon_probe_ldv_zalloc_#res.offset|=0, |s3c_hwmon_probe_ldv_zalloc_#t~malloc32.base|=5019, |s3c_hwmon_probe_ldv_zalloc_#t~malloc32.offset|=0, |s3c_hwmon_probe_platform_set_drvdata_#in~data.base|=5019, |s3c_hwmon_probe_platform_set_drvdata_#in~data.offset|=0, |s3c_hwmon_probe_platform_set_drvdata_#in~pdev.base|=18446744073709551615, |s3c_hwmon_probe_platform_set_drvdata_#in~pdev.offset|=0, |s3c_hwmon_probe_~#__key~0.base|=52, |s3c_hwmon_probe_~#__key~0.offset|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] CALL call #t~ret92 := IS_ERR(#t~mem91.base, #t~mem91.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |IS_ERR_#in~ptr.base|=18446744073709551616, |IS_ERR_#in~ptr.offset|=(- 18446744073709551616), |old(~ldv_count_2~0)|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset;havoc ~tmp~16; VAL [IS_ERR_~ptr.base=18446744073709551616, IS_ERR_~ptr.offset=(- 18446744073709551616), |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |IS_ERR_#in~ptr.base|=18446744073709551616, |IS_ERR_#in~ptr.offset|=(- 18446744073709551616), |old(~ldv_count_2~0)|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] CALL call #t~ret137 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |ldv_is_err_#in~ptr.base|=18446744073709551616, |ldv_is_err_#in~ptr.offset|=(- 18446744073709551616), |old(~ldv_count_2~0)|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset;#res := (if 0 == (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0) then 0 else 1);assume true; VAL [ldv_is_err_~ptr.base=18446744073709551616, ldv_is_err_~ptr.offset=(- 18446744073709551616), |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |ldv_is_err_#in~ptr.base|=18446744073709551616, |ldv_is_err_#in~ptr.offset|=(- 18446744073709551616), |ldv_is_err_#res|=0, |old(~ldv_count_2~0)|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] RET #393#return; VAL [IS_ERR_~ptr.base=18446744073709551616, IS_ERR_~ptr.offset=(- 18446744073709551616), |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |IS_ERR_#in~ptr.base|=18446744073709551616, |IS_ERR_#in~ptr.offset|=(- 18446744073709551616), |IS_ERR_#t~ret137|=0, |old(~ldv_count_2~0)|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] ~tmp~16 := #t~ret137;havoc #t~ret137;#res := ~tmp~16 % 256;assume true; VAL [IS_ERR_~ptr.base=18446744073709551616, IS_ERR_~ptr.offset=(- 18446744073709551616), IS_ERR_~tmp~16=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |IS_ERR_#in~ptr.base|=18446744073709551616, |IS_ERR_#in~ptr.offset|=(- 18446744073709551616), |IS_ERR_#res|=0, |old(~ldv_count_2~0)|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] RET #353#return; VAL [s3c_hwmon_probe_ldv_kzalloc_9_~flags=208, s3c_hwmon_probe_ldv_kzalloc_9_~size=800, s3c_hwmon_probe_ldv_kzalloc_9_~tmp~19.base=5019, s3c_hwmon_probe_ldv_kzalloc_9_~tmp~19.offset=0, s3c_hwmon_probe_ldv_zalloc_~p~1.base=5019, s3c_hwmon_probe_ldv_zalloc_~p~1.offset=0, s3c_hwmon_probe_ldv_zalloc_~size=800, s3c_hwmon_probe_ldv_zalloc_~tmp___0~1=0, s3c_hwmon_probe_ldv_zalloc_~tmp~1.base=5019, s3c_hwmon_probe_ldv_zalloc_~tmp~1.offset=0, s3c_hwmon_probe_platform_set_drvdata_~data.base=5019, s3c_hwmon_probe_platform_set_drvdata_~data.offset=0, s3c_hwmon_probe_platform_set_drvdata_~pdev.base=18446744073709551615, s3c_hwmon_probe_platform_set_drvdata_~pdev.offset=0, s3c_hwmon_probe_~dev.base=18446744073709551615, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=5019, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~pdata~2.base=12376, s3c_hwmon_probe_~pdata~2.offset=(- 143312754708649506517079), s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp~10.base=5019, s3c_hwmon_probe_~tmp~10.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |old(~ldv_count_2~0)|=0, |s3c_hwmon_probe_#in~dev.base|=18446744073709551615, |s3c_hwmon_probe_#in~dev.offset|=0, |s3c_hwmon_probe_#t~mem91.base|=18446744073709551616, |s3c_hwmon_probe_#t~mem91.offset|=(- 18446744073709551616), |s3c_hwmon_probe_#t~ret92|=0, |s3c_hwmon_probe_ldv_kzalloc_9_#in~flags|=208, |s3c_hwmon_probe_ldv_kzalloc_9_#in~size|=800, |s3c_hwmon_probe_ldv_kzalloc_9_#res.base|=5019, |s3c_hwmon_probe_ldv_kzalloc_9_#res.offset|=0, |s3c_hwmon_probe_ldv_zalloc_#in~size|=800, |s3c_hwmon_probe_ldv_zalloc_#res.base|=5019, |s3c_hwmon_probe_ldv_zalloc_#res.offset|=0, |s3c_hwmon_probe_ldv_zalloc_#t~malloc32.base|=5019, |s3c_hwmon_probe_ldv_zalloc_#t~malloc32.offset|=0, |s3c_hwmon_probe_platform_set_drvdata_#in~data.base|=5019, |s3c_hwmon_probe_platform_set_drvdata_#in~data.offset|=0, |s3c_hwmon_probe_platform_set_drvdata_#in~pdev.base|=18446744073709551615, |s3c_hwmon_probe_platform_set_drvdata_#in~pdev.offset|=0, |s3c_hwmon_probe_~#__key~0.base|=52, |s3c_hwmon_probe_~#__key~0.offset|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] assume -9223372036854775808 <= #t~ret92 && #t~ret92 <= 9223372036854775807;~tmp___1~0 := #t~ret92;havoc #t~ret92;havoc #t~mem91.base, #t~mem91.offset; VAL [s3c_hwmon_probe_ldv_kzalloc_9_~flags=208, s3c_hwmon_probe_ldv_kzalloc_9_~size=800, s3c_hwmon_probe_ldv_kzalloc_9_~tmp~19.base=5019, s3c_hwmon_probe_ldv_kzalloc_9_~tmp~19.offset=0, s3c_hwmon_probe_ldv_zalloc_~p~1.base=5019, s3c_hwmon_probe_ldv_zalloc_~p~1.offset=0, s3c_hwmon_probe_ldv_zalloc_~size=800, s3c_hwmon_probe_ldv_zalloc_~tmp___0~1=0, s3c_hwmon_probe_ldv_zalloc_~tmp~1.base=5019, s3c_hwmon_probe_ldv_zalloc_~tmp~1.offset=0, s3c_hwmon_probe_platform_set_drvdata_~data.base=5019, s3c_hwmon_probe_platform_set_drvdata_~data.offset=0, s3c_hwmon_probe_platform_set_drvdata_~pdev.base=18446744073709551615, s3c_hwmon_probe_platform_set_drvdata_~pdev.offset=0, s3c_hwmon_probe_~dev.base=18446744073709551615, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=5019, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~pdata~2.base=12376, s3c_hwmon_probe_~pdata~2.offset=(- 143312754708649506517079), s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp~10.base=5019, s3c_hwmon_probe_~tmp~10.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |old(~ldv_count_2~0)|=0, |s3c_hwmon_probe_#in~dev.base|=18446744073709551615, |s3c_hwmon_probe_#in~dev.offset|=0, |s3c_hwmon_probe_ldv_kzalloc_9_#in~flags|=208, |s3c_hwmon_probe_ldv_kzalloc_9_#in~size|=800, |s3c_hwmon_probe_ldv_kzalloc_9_#res.base|=5019, |s3c_hwmon_probe_ldv_kzalloc_9_#res.offset|=0, |s3c_hwmon_probe_ldv_zalloc_#in~size|=800, |s3c_hwmon_probe_ldv_zalloc_#res.base|=5019, |s3c_hwmon_probe_ldv_zalloc_#res.offset|=0, |s3c_hwmon_probe_ldv_zalloc_#t~malloc32.base|=5019, |s3c_hwmon_probe_ldv_zalloc_#t~malloc32.offset|=0, |s3c_hwmon_probe_platform_set_drvdata_#in~data.base|=5019, |s3c_hwmon_probe_platform_set_drvdata_#in~data.offset|=0, |s3c_hwmon_probe_platform_set_drvdata_#in~pdev.base|=18446744073709551615, |s3c_hwmon_probe_platform_set_drvdata_#in~pdev.offset|=0, |s3c_hwmon_probe_~#__key~0.base|=52, |s3c_hwmon_probe_~#__key~0.offset|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] assume !(0 != ~tmp___1~0);s3c_hwmon_add_raw_#in~dev.base, s3c_hwmon_add_raw_#in~dev.offset := ~dev.base, 12 + ~dev.offset;havoc s3c_hwmon_add_raw_#res;havoc s3c_hwmon_add_raw_~dev.base, s3c_hwmon_add_raw_~dev.offset;s3c_hwmon_add_raw_~dev.base, s3c_hwmon_add_raw_~dev.offset := s3c_hwmon_add_raw_#in~dev.base, s3c_hwmon_add_raw_#in~dev.offset;s3c_hwmon_add_raw_#res := 0;#t~ret97 := s3c_hwmon_add_raw_#res;assume -2147483648 <= #t~ret97 && #t~ret97 <= 2147483647;~ret~3 := #t~ret97;havoc #t~ret97; VAL [s3c_hwmon_probe_ldv_kzalloc_9_~flags=208, s3c_hwmon_probe_ldv_kzalloc_9_~size=800, s3c_hwmon_probe_ldv_kzalloc_9_~tmp~19.base=5019, s3c_hwmon_probe_ldv_kzalloc_9_~tmp~19.offset=0, s3c_hwmon_probe_ldv_zalloc_~p~1.base=5019, s3c_hwmon_probe_ldv_zalloc_~p~1.offset=0, s3c_hwmon_probe_ldv_zalloc_~size=800, s3c_hwmon_probe_ldv_zalloc_~tmp___0~1=0, s3c_hwmon_probe_ldv_zalloc_~tmp~1.base=5019, s3c_hwmon_probe_ldv_zalloc_~tmp~1.offset=0, s3c_hwmon_probe_platform_set_drvdata_~data.base=5019, s3c_hwmon_probe_platform_set_drvdata_~data.offset=0, s3c_hwmon_probe_platform_set_drvdata_~pdev.base=18446744073709551615, s3c_hwmon_probe_platform_set_drvdata_~pdev.offset=0, s3c_hwmon_probe_s3c_hwmon_add_raw_~dev.base=18446744073709551615, s3c_hwmon_probe_s3c_hwmon_add_raw_~dev.offset=12, s3c_hwmon_probe_~dev.base=18446744073709551615, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=5019, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~pdata~2.base=12376, s3c_hwmon_probe_~pdata~2.offset=(- 143312754708649506517079), s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp~10.base=5019, s3c_hwmon_probe_~tmp~10.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |old(~ldv_count_2~0)|=0, |s3c_hwmon_probe_#in~dev.base|=18446744073709551615, |s3c_hwmon_probe_#in~dev.offset|=0, |s3c_hwmon_probe_ldv_kzalloc_9_#in~flags|=208, |s3c_hwmon_probe_ldv_kzalloc_9_#in~size|=800, |s3c_hwmon_probe_ldv_kzalloc_9_#res.base|=5019, |s3c_hwmon_probe_ldv_kzalloc_9_#res.offset|=0, |s3c_hwmon_probe_ldv_zalloc_#in~size|=800, |s3c_hwmon_probe_ldv_zalloc_#res.base|=5019, |s3c_hwmon_probe_ldv_zalloc_#res.offset|=0, |s3c_hwmon_probe_ldv_zalloc_#t~malloc32.base|=5019, |s3c_hwmon_probe_ldv_zalloc_#t~malloc32.offset|=0, |s3c_hwmon_probe_platform_set_drvdata_#in~data.base|=5019, |s3c_hwmon_probe_platform_set_drvdata_#in~data.offset|=0, |s3c_hwmon_probe_platform_set_drvdata_#in~pdev.base|=18446744073709551615, |s3c_hwmon_probe_platform_set_drvdata_#in~pdev.offset|=0, |s3c_hwmon_probe_s3c_hwmon_add_raw_#in~dev.base|=18446744073709551615, |s3c_hwmon_probe_s3c_hwmon_add_raw_#in~dev.offset|=12, |s3c_hwmon_probe_s3c_hwmon_add_raw_#res|=0, |s3c_hwmon_probe_~#__key~0.base|=52, |s3c_hwmon_probe_~#__key~0.offset|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] assume !(0 != ~ret~3);call #t~ret98.base, #t~ret98.offset := hwmon_device_register(~dev.base, 12 + ~dev.offset);call write~$Pointer$(#t~ret98.base, #t~ret98.offset, ~hwmon~1.base, 160 + ~hwmon~1.offset, 8);havoc #t~ret98.base, #t~ret98.offset;call #t~mem99.base, #t~mem99.offset := read~$Pointer$(~hwmon~1.base, 160 + ~hwmon~1.offset, 8); VAL [s3c_hwmon_probe_ldv_kzalloc_9_~flags=208, s3c_hwmon_probe_ldv_kzalloc_9_~size=800, s3c_hwmon_probe_ldv_kzalloc_9_~tmp~19.base=5019, s3c_hwmon_probe_ldv_kzalloc_9_~tmp~19.offset=0, s3c_hwmon_probe_ldv_zalloc_~p~1.base=5019, s3c_hwmon_probe_ldv_zalloc_~p~1.offset=0, s3c_hwmon_probe_ldv_zalloc_~size=800, s3c_hwmon_probe_ldv_zalloc_~tmp___0~1=0, s3c_hwmon_probe_ldv_zalloc_~tmp~1.base=5019, s3c_hwmon_probe_ldv_zalloc_~tmp~1.offset=0, s3c_hwmon_probe_platform_set_drvdata_~data.base=5019, s3c_hwmon_probe_platform_set_drvdata_~data.offset=0, s3c_hwmon_probe_platform_set_drvdata_~pdev.base=18446744073709551615, s3c_hwmon_probe_platform_set_drvdata_~pdev.offset=0, s3c_hwmon_probe_s3c_hwmon_add_raw_~dev.base=18446744073709551615, s3c_hwmon_probe_s3c_hwmon_add_raw_~dev.offset=12, s3c_hwmon_probe_~dev.base=18446744073709551615, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=5019, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~pdata~2.base=12376, s3c_hwmon_probe_~pdata~2.offset=(- 143312754708649506517079), s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp~10.base=5019, s3c_hwmon_probe_~tmp~10.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |old(~ldv_count_2~0)|=0, |s3c_hwmon_probe_#in~dev.base|=18446744073709551615, |s3c_hwmon_probe_#in~dev.offset|=0, |s3c_hwmon_probe_#t~mem99.base|=9223372036854775808, |s3c_hwmon_probe_#t~mem99.offset|=27670116110564327424, |s3c_hwmon_probe_ldv_kzalloc_9_#in~flags|=208, |s3c_hwmon_probe_ldv_kzalloc_9_#in~size|=800, |s3c_hwmon_probe_ldv_kzalloc_9_#res.base|=5019, |s3c_hwmon_probe_ldv_kzalloc_9_#res.offset|=0, |s3c_hwmon_probe_ldv_zalloc_#in~size|=800, |s3c_hwmon_probe_ldv_zalloc_#res.base|=5019, |s3c_hwmon_probe_ldv_zalloc_#res.offset|=0, |s3c_hwmon_probe_ldv_zalloc_#t~malloc32.base|=5019, |s3c_hwmon_probe_ldv_zalloc_#t~malloc32.offset|=0, |s3c_hwmon_probe_platform_set_drvdata_#in~data.base|=5019, |s3c_hwmon_probe_platform_set_drvdata_#in~data.offset|=0, |s3c_hwmon_probe_platform_set_drvdata_#in~pdev.base|=18446744073709551615, |s3c_hwmon_probe_platform_set_drvdata_#in~pdev.offset|=0, |s3c_hwmon_probe_s3c_hwmon_add_raw_#in~dev.base|=18446744073709551615, |s3c_hwmon_probe_s3c_hwmon_add_raw_#in~dev.offset|=12, |s3c_hwmon_probe_s3c_hwmon_add_raw_#res|=0, |s3c_hwmon_probe_~#__key~0.base|=52, |s3c_hwmon_probe_~#__key~0.offset|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] CALL call #t~ret100 := IS_ERR(#t~mem99.base, #t~mem99.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |IS_ERR_#in~ptr.base|=9223372036854775808, |IS_ERR_#in~ptr.offset|=27670116110564327424, |old(~ldv_count_2~0)|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset;havoc ~tmp~16; VAL [IS_ERR_~ptr.base=9223372036854775808, IS_ERR_~ptr.offset=27670116110564327424, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |IS_ERR_#in~ptr.base|=9223372036854775808, |IS_ERR_#in~ptr.offset|=27670116110564327424, |old(~ldv_count_2~0)|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] CALL call #t~ret137 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |ldv_is_err_#in~ptr.base|=9223372036854775808, |ldv_is_err_#in~ptr.offset|=27670116110564327424, |old(~ldv_count_2~0)|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset;#res := (if 0 == (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0) then 0 else 1);assume true; VAL [ldv_is_err_~ptr.base=9223372036854775808, ldv_is_err_~ptr.offset=27670116110564327424, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |ldv_is_err_#in~ptr.base|=9223372036854775808, |ldv_is_err_#in~ptr.offset|=27670116110564327424, |ldv_is_err_#res|=0, |old(~ldv_count_2~0)|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] RET #393#return; VAL [IS_ERR_~ptr.base=9223372036854775808, IS_ERR_~ptr.offset=27670116110564327424, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |IS_ERR_#in~ptr.base|=9223372036854775808, |IS_ERR_#in~ptr.offset|=27670116110564327424, |IS_ERR_#t~ret137|=0, |old(~ldv_count_2~0)|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] ~tmp~16 := #t~ret137;havoc #t~ret137;#res := ~tmp~16 % 256;assume true; VAL [IS_ERR_~ptr.base=9223372036854775808, IS_ERR_~ptr.offset=27670116110564327424, IS_ERR_~tmp~16=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |IS_ERR_#in~ptr.base|=9223372036854775808, |IS_ERR_#in~ptr.offset|=27670116110564327424, |IS_ERR_#res|=0, |old(~ldv_count_2~0)|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] RET #357#return; VAL [s3c_hwmon_probe_ldv_kzalloc_9_~flags=208, s3c_hwmon_probe_ldv_kzalloc_9_~size=800, s3c_hwmon_probe_ldv_kzalloc_9_~tmp~19.base=5019, s3c_hwmon_probe_ldv_kzalloc_9_~tmp~19.offset=0, s3c_hwmon_probe_ldv_zalloc_~p~1.base=5019, s3c_hwmon_probe_ldv_zalloc_~p~1.offset=0, s3c_hwmon_probe_ldv_zalloc_~size=800, s3c_hwmon_probe_ldv_zalloc_~tmp___0~1=0, s3c_hwmon_probe_ldv_zalloc_~tmp~1.base=5019, s3c_hwmon_probe_ldv_zalloc_~tmp~1.offset=0, s3c_hwmon_probe_platform_set_drvdata_~data.base=5019, s3c_hwmon_probe_platform_set_drvdata_~data.offset=0, s3c_hwmon_probe_platform_set_drvdata_~pdev.base=18446744073709551615, s3c_hwmon_probe_platform_set_drvdata_~pdev.offset=0, s3c_hwmon_probe_s3c_hwmon_add_raw_~dev.base=18446744073709551615, s3c_hwmon_probe_s3c_hwmon_add_raw_~dev.offset=12, s3c_hwmon_probe_~dev.base=18446744073709551615, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=5019, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~pdata~2.base=12376, s3c_hwmon_probe_~pdata~2.offset=(- 143312754708649506517079), s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp~10.base=5019, s3c_hwmon_probe_~tmp~10.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |old(~ldv_count_2~0)|=0, |s3c_hwmon_probe_#in~dev.base|=18446744073709551615, |s3c_hwmon_probe_#in~dev.offset|=0, |s3c_hwmon_probe_#t~mem99.base|=9223372036854775808, |s3c_hwmon_probe_#t~mem99.offset|=27670116110564327424, |s3c_hwmon_probe_#t~ret100|=0, |s3c_hwmon_probe_ldv_kzalloc_9_#in~flags|=208, |s3c_hwmon_probe_ldv_kzalloc_9_#in~size|=800, |s3c_hwmon_probe_ldv_kzalloc_9_#res.base|=5019, |s3c_hwmon_probe_ldv_kzalloc_9_#res.offset|=0, |s3c_hwmon_probe_ldv_zalloc_#in~size|=800, |s3c_hwmon_probe_ldv_zalloc_#res.base|=5019, |s3c_hwmon_probe_ldv_zalloc_#res.offset|=0, |s3c_hwmon_probe_ldv_zalloc_#t~malloc32.base|=5019, |s3c_hwmon_probe_ldv_zalloc_#t~malloc32.offset|=0, |s3c_hwmon_probe_platform_set_drvdata_#in~data.base|=5019, |s3c_hwmon_probe_platform_set_drvdata_#in~data.offset|=0, |s3c_hwmon_probe_platform_set_drvdata_#in~pdev.base|=18446744073709551615, |s3c_hwmon_probe_platform_set_drvdata_#in~pdev.offset|=0, |s3c_hwmon_probe_s3c_hwmon_add_raw_#in~dev.base|=18446744073709551615, |s3c_hwmon_probe_s3c_hwmon_add_raw_#in~dev.offset|=12, |s3c_hwmon_probe_s3c_hwmon_add_raw_#res|=0, |s3c_hwmon_probe_~#__key~0.base|=52, |s3c_hwmon_probe_~#__key~0.offset|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] assume -9223372036854775808 <= #t~ret100 && #t~ret100 <= 9223372036854775807;~tmp___3~0 := #t~ret100;havoc #t~mem99.base, #t~mem99.offset;havoc #t~ret100; VAL [s3c_hwmon_probe_ldv_kzalloc_9_~flags=208, s3c_hwmon_probe_ldv_kzalloc_9_~size=800, s3c_hwmon_probe_ldv_kzalloc_9_~tmp~19.base=5019, s3c_hwmon_probe_ldv_kzalloc_9_~tmp~19.offset=0, s3c_hwmon_probe_ldv_zalloc_~p~1.base=5019, s3c_hwmon_probe_ldv_zalloc_~p~1.offset=0, s3c_hwmon_probe_ldv_zalloc_~size=800, s3c_hwmon_probe_ldv_zalloc_~tmp___0~1=0, s3c_hwmon_probe_ldv_zalloc_~tmp~1.base=5019, s3c_hwmon_probe_ldv_zalloc_~tmp~1.offset=0, s3c_hwmon_probe_platform_set_drvdata_~data.base=5019, s3c_hwmon_probe_platform_set_drvdata_~data.offset=0, s3c_hwmon_probe_platform_set_drvdata_~pdev.base=18446744073709551615, s3c_hwmon_probe_platform_set_drvdata_~pdev.offset=0, s3c_hwmon_probe_s3c_hwmon_add_raw_~dev.base=18446744073709551615, s3c_hwmon_probe_s3c_hwmon_add_raw_~dev.offset=12, s3c_hwmon_probe_~dev.base=18446744073709551615, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=5019, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~pdata~2.base=12376, s3c_hwmon_probe_~pdata~2.offset=(- 143312754708649506517079), s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp___3~0=0, s3c_hwmon_probe_~tmp~10.base=5019, s3c_hwmon_probe_~tmp~10.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |old(~ldv_count_2~0)|=0, |s3c_hwmon_probe_#in~dev.base|=18446744073709551615, |s3c_hwmon_probe_#in~dev.offset|=0, |s3c_hwmon_probe_ldv_kzalloc_9_#in~flags|=208, |s3c_hwmon_probe_ldv_kzalloc_9_#in~size|=800, |s3c_hwmon_probe_ldv_kzalloc_9_#res.base|=5019, |s3c_hwmon_probe_ldv_kzalloc_9_#res.offset|=0, |s3c_hwmon_probe_ldv_zalloc_#in~size|=800, |s3c_hwmon_probe_ldv_zalloc_#res.base|=5019, |s3c_hwmon_probe_ldv_zalloc_#res.offset|=0, |s3c_hwmon_probe_ldv_zalloc_#t~malloc32.base|=5019, |s3c_hwmon_probe_ldv_zalloc_#t~malloc32.offset|=0, |s3c_hwmon_probe_platform_set_drvdata_#in~data.base|=5019, |s3c_hwmon_probe_platform_set_drvdata_#in~data.offset|=0, |s3c_hwmon_probe_platform_set_drvdata_#in~pdev.base|=18446744073709551615, |s3c_hwmon_probe_platform_set_drvdata_#in~pdev.offset|=0, |s3c_hwmon_probe_s3c_hwmon_add_raw_#in~dev.base|=18446744073709551615, |s3c_hwmon_probe_s3c_hwmon_add_raw_#in~dev.offset|=12, |s3c_hwmon_probe_s3c_hwmon_add_raw_#res|=0, |s3c_hwmon_probe_~#__key~0.base|=52, |s3c_hwmon_probe_~#__key~0.offset|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] assume !(0 != ~tmp___3~0);~i~0 := 0; VAL [s3c_hwmon_probe_ldv_kzalloc_9_~flags=208, s3c_hwmon_probe_ldv_kzalloc_9_~size=800, s3c_hwmon_probe_ldv_kzalloc_9_~tmp~19.base=5019, s3c_hwmon_probe_ldv_kzalloc_9_~tmp~19.offset=0, s3c_hwmon_probe_ldv_zalloc_~p~1.base=5019, s3c_hwmon_probe_ldv_zalloc_~p~1.offset=0, s3c_hwmon_probe_ldv_zalloc_~size=800, s3c_hwmon_probe_ldv_zalloc_~tmp___0~1=0, s3c_hwmon_probe_ldv_zalloc_~tmp~1.base=5019, s3c_hwmon_probe_ldv_zalloc_~tmp~1.offset=0, s3c_hwmon_probe_platform_set_drvdata_~data.base=5019, s3c_hwmon_probe_platform_set_drvdata_~data.offset=0, s3c_hwmon_probe_platform_set_drvdata_~pdev.base=18446744073709551615, s3c_hwmon_probe_platform_set_drvdata_~pdev.offset=0, s3c_hwmon_probe_s3c_hwmon_add_raw_~dev.base=18446744073709551615, s3c_hwmon_probe_s3c_hwmon_add_raw_~dev.offset=12, s3c_hwmon_probe_~dev.base=18446744073709551615, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=5019, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~i~0=0, s3c_hwmon_probe_~pdata~2.base=12376, s3c_hwmon_probe_~pdata~2.offset=(- 143312754708649506517079), s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp___3~0=0, s3c_hwmon_probe_~tmp~10.base=5019, s3c_hwmon_probe_~tmp~10.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |old(~ldv_count_2~0)|=0, |s3c_hwmon_probe_#in~dev.base|=18446744073709551615, |s3c_hwmon_probe_#in~dev.offset|=0, |s3c_hwmon_probe_ldv_kzalloc_9_#in~flags|=208, |s3c_hwmon_probe_ldv_kzalloc_9_#in~size|=800, |s3c_hwmon_probe_ldv_kzalloc_9_#res.base|=5019, |s3c_hwmon_probe_ldv_kzalloc_9_#res.offset|=0, |s3c_hwmon_probe_ldv_zalloc_#in~size|=800, |s3c_hwmon_probe_ldv_zalloc_#res.base|=5019, |s3c_hwmon_probe_ldv_zalloc_#res.offset|=0, |s3c_hwmon_probe_ldv_zalloc_#t~malloc32.base|=5019, |s3c_hwmon_probe_ldv_zalloc_#t~malloc32.offset|=0, |s3c_hwmon_probe_platform_set_drvdata_#in~data.base|=5019, |s3c_hwmon_probe_platform_set_drvdata_#in~data.offset|=0, |s3c_hwmon_probe_platform_set_drvdata_#in~pdev.base|=18446744073709551615, |s3c_hwmon_probe_platform_set_drvdata_#in~pdev.offset|=0, |s3c_hwmon_probe_s3c_hwmon_add_raw_#in~dev.base|=18446744073709551615, |s3c_hwmon_probe_s3c_hwmon_add_raw_#in~dev.offset|=12, |s3c_hwmon_probe_s3c_hwmon_add_raw_#res|=0, |s3c_hwmon_probe_~#__key~0.base|=52, |s3c_hwmon_probe_~#__key~0.offset|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] assume ~i~0 % 4294967296 <= 7;call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~pdata~2.base, ~pdata~2.offset + 8 * ~i~0, 8);~cfg~2.base, ~cfg~2.offset := #t~mem105.base, #t~mem105.offset;havoc #t~mem105.base, #t~mem105.offset; VAL [s3c_hwmon_probe_ldv_kzalloc_9_~flags=208, s3c_hwmon_probe_ldv_kzalloc_9_~size=800, s3c_hwmon_probe_ldv_kzalloc_9_~tmp~19.base=5019, s3c_hwmon_probe_ldv_kzalloc_9_~tmp~19.offset=0, s3c_hwmon_probe_ldv_zalloc_~p~1.base=5019, s3c_hwmon_probe_ldv_zalloc_~p~1.offset=0, s3c_hwmon_probe_ldv_zalloc_~size=800, s3c_hwmon_probe_ldv_zalloc_~tmp___0~1=0, s3c_hwmon_probe_ldv_zalloc_~tmp~1.base=5019, s3c_hwmon_probe_ldv_zalloc_~tmp~1.offset=0, s3c_hwmon_probe_platform_set_drvdata_~data.base=5019, s3c_hwmon_probe_platform_set_drvdata_~data.offset=0, s3c_hwmon_probe_platform_set_drvdata_~pdev.base=18446744073709551615, s3c_hwmon_probe_platform_set_drvdata_~pdev.offset=0, s3c_hwmon_probe_s3c_hwmon_add_raw_~dev.base=18446744073709551615, s3c_hwmon_probe_s3c_hwmon_add_raw_~dev.offset=12, s3c_hwmon_probe_~cfg~2.base=18446744073709548820, s3c_hwmon_probe_~cfg~2.offset=148, s3c_hwmon_probe_~dev.base=18446744073709551615, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=5019, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~i~0=0, s3c_hwmon_probe_~pdata~2.base=12376, s3c_hwmon_probe_~pdata~2.offset=(- 143312754708649506517079), s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp___3~0=0, s3c_hwmon_probe_~tmp~10.base=5019, s3c_hwmon_probe_~tmp~10.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |old(~ldv_count_2~0)|=0, |s3c_hwmon_probe_#in~dev.base|=18446744073709551615, |s3c_hwmon_probe_#in~dev.offset|=0, |s3c_hwmon_probe_ldv_kzalloc_9_#in~flags|=208, |s3c_hwmon_probe_ldv_kzalloc_9_#in~size|=800, |s3c_hwmon_probe_ldv_kzalloc_9_#res.base|=5019, |s3c_hwmon_probe_ldv_kzalloc_9_#res.offset|=0, |s3c_hwmon_probe_ldv_zalloc_#in~size|=800, |s3c_hwmon_probe_ldv_zalloc_#res.base|=5019, |s3c_hwmon_probe_ldv_zalloc_#res.offset|=0, |s3c_hwmon_probe_ldv_zalloc_#t~malloc32.base|=5019, |s3c_hwmon_probe_ldv_zalloc_#t~malloc32.offset|=0, |s3c_hwmon_probe_platform_set_drvdata_#in~data.base|=5019, |s3c_hwmon_probe_platform_set_drvdata_#in~data.offset|=0, |s3c_hwmon_probe_platform_set_drvdata_#in~pdev.base|=18446744073709551615, |s3c_hwmon_probe_platform_set_drvdata_#in~pdev.offset|=0, |s3c_hwmon_probe_s3c_hwmon_add_raw_#in~dev.base|=18446744073709551615, |s3c_hwmon_probe_s3c_hwmon_add_raw_#in~dev.offset|=12, |s3c_hwmon_probe_s3c_hwmon_add_raw_#res|=0, |s3c_hwmon_probe_~#__key~0.base|=52, |s3c_hwmon_probe_~#__key~0.offset|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] assume !(0 == (~cfg~2.base + ~cfg~2.offset) % 18446744073709551616);call #t~mem106 := read~int(~cfg~2.base, 8 + ~cfg~2.offset, 4);BeginParallelComposition{ParallelCodeBlock0: assume #t~mem106 % 4294967296 > 65535;havoc #t~mem106;havoc #t~nondet107;ParallelCodeBlock1: assume !(#t~mem106 % 4294967296 > 65535);havoc #t~mem106;}EndParallelCompositioncall #t~mem109 := read~int(~cfg~2.base, 12 + ~cfg~2.offset, 4); VAL [s3c_hwmon_probe_ldv_kzalloc_9_~flags=208, s3c_hwmon_probe_ldv_kzalloc_9_~size=800, s3c_hwmon_probe_ldv_kzalloc_9_~tmp~19.base=5019, s3c_hwmon_probe_ldv_kzalloc_9_~tmp~19.offset=0, s3c_hwmon_probe_ldv_zalloc_~p~1.base=5019, s3c_hwmon_probe_ldv_zalloc_~p~1.offset=0, s3c_hwmon_probe_ldv_zalloc_~size=800, s3c_hwmon_probe_ldv_zalloc_~tmp___0~1=0, s3c_hwmon_probe_ldv_zalloc_~tmp~1.base=5019, s3c_hwmon_probe_ldv_zalloc_~tmp~1.offset=0, s3c_hwmon_probe_platform_set_drvdata_~data.base=5019, s3c_hwmon_probe_platform_set_drvdata_~data.offset=0, s3c_hwmon_probe_platform_set_drvdata_~pdev.base=18446744073709551615, s3c_hwmon_probe_platform_set_drvdata_~pdev.offset=0, s3c_hwmon_probe_s3c_hwmon_add_raw_~dev.base=18446744073709551615, s3c_hwmon_probe_s3c_hwmon_add_raw_~dev.offset=12, s3c_hwmon_probe_~cfg~2.base=18446744073709548820, s3c_hwmon_probe_~cfg~2.offset=148, s3c_hwmon_probe_~dev.base=18446744073709551615, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=5019, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~i~0=0, s3c_hwmon_probe_~pdata~2.base=12376, s3c_hwmon_probe_~pdata~2.offset=(- 143312754708649506517079), s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp___3~0=0, s3c_hwmon_probe_~tmp~10.base=5019, s3c_hwmon_probe_~tmp~10.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |old(~ldv_count_2~0)|=0, |s3c_hwmon_probe_#in~dev.base|=18446744073709551615, |s3c_hwmon_probe_#in~dev.offset|=0, |s3c_hwmon_probe_#t~mem109|=25778393710593, |s3c_hwmon_probe_#t~nondet107|=68, |s3c_hwmon_probe_ldv_kzalloc_9_#in~flags|=208, |s3c_hwmon_probe_ldv_kzalloc_9_#in~size|=800, |s3c_hwmon_probe_ldv_kzalloc_9_#res.base|=5019, |s3c_hwmon_probe_ldv_kzalloc_9_#res.offset|=0, |s3c_hwmon_probe_ldv_zalloc_#in~size|=800, |s3c_hwmon_probe_ldv_zalloc_#res.base|=5019, |s3c_hwmon_probe_ldv_zalloc_#res.offset|=0, |s3c_hwmon_probe_ldv_zalloc_#t~malloc32.base|=5019, |s3c_hwmon_probe_ldv_zalloc_#t~malloc32.offset|=0, |s3c_hwmon_probe_platform_set_drvdata_#in~data.base|=5019, |s3c_hwmon_probe_platform_set_drvdata_#in~data.offset|=0, |s3c_hwmon_probe_platform_set_drvdata_#in~pdev.base|=18446744073709551615, |s3c_hwmon_probe_platform_set_drvdata_#in~pdev.offset|=0, |s3c_hwmon_probe_s3c_hwmon_add_raw_#in~dev.base|=18446744073709551615, |s3c_hwmon_probe_s3c_hwmon_add_raw_#in~dev.offset|=12, |s3c_hwmon_probe_s3c_hwmon_add_raw_#res|=0, |s3c_hwmon_probe_~#__key~0.base|=52, |s3c_hwmon_probe_~#__key~0.offset|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] assume !(0 == #t~mem109 % 4294967296);havoc #t~mem109;call #t~mem112.base, #t~mem112.offset := read~$Pointer$(~pdata~2.base, ~pdata~2.offset + 8 * ~i~0, 8);s3c_hwmon_create_attr_#in~dev.base, s3c_hwmon_create_attr_#in~dev.offset, s3c_hwmon_create_attr_#in~cfg.base, s3c_hwmon_create_attr_#in~cfg.offset, s3c_hwmon_create_attr_#in~attrs.base, s3c_hwmon_create_attr_#in~attrs.offset, s3c_hwmon_create_attr_#in~channel := ~dev.base, 12 + ~dev.offset, #t~mem112.base, #t~mem112.offset, ~hwmon~1.base, 168 + ~hwmon~1.offset + 116 * (~i~0 % 4294967296), ~i~0;havoc s3c_hwmon_create_attr_#res;havoc s3c_hwmon_create_attr_#t~nondet72, s3c_hwmon_create_attr_#t~ret74, s3c_hwmon_create_attr_#t~nondet75, s3c_hwmon_create_attr_#t~mem77.base, s3c_hwmon_create_attr_#t~mem77.offset, s3c_hwmon_create_attr_#t~nondet78, s3c_hwmon_create_attr_#t~ret80, s3c_hwmon_create_attr_#t~nondet81, s3c_hwmon_create_attr_~dev.base, s3c_hwmon_create_attr_~dev.offset, s3c_hwmon_create_attr_~cfg.base, s3c_hwmon_create_attr_~cfg.offset, s3c_hwmon_create_attr_~attrs.base, s3c_hwmon_create_attr_~attrs.offset, s3c_hwmon_create_attr_~channel, s3c_hwmon_create_attr_~attr~0.base, s3c_hwmon_create_attr_~attr~0.offset, s3c_hwmon_create_attr_~ret~2;s3c_hwmon_create_attr_~dev.base, s3c_hwmon_create_attr_~dev.offset := s3c_hwmon_create_attr_#in~dev.base, s3c_hwmon_create_attr_#in~dev.offset;s3c_hwmon_create_attr_~cfg.base, s3c_hwmon_create_attr_~cfg.offset := s3c_hwmon_create_attr_#in~cfg.base, s3c_hwmon_create_attr_#in~cfg.offset;s3c_hwmon_create_attr_~attrs.base, s3c_hwmon_create_attr_~attrs.offset := s3c_hwmon_create_attr_#in~attrs.base, s3c_hwmon_create_attr_#in~attrs.offset;s3c_hwmon_create_attr_~channel := s3c_hwmon_create_attr_#in~channel;havoc s3c_hwmon_create_attr_~attr~0.base, s3c_hwmon_create_attr_~attr~0.offset;havoc s3c_hwmon_create_attr_~ret~2;havoc s3c_hwmon_create_attr_#t~nondet72;s3c_hwmon_create_attr_~attr~0.base, s3c_hwmon_create_attr_~attr~0.offset := s3c_hwmon_create_attr_~attrs.base, s3c_hwmon_create_attr_~attrs.offset;call write~int(s3c_hwmon_create_attr_~channel, s3c_hwmon_create_attr_~attr~0.base, 42 + s3c_hwmon_create_attr_~attr~0.offset, 4);call write~$Pointer$(s3c_hwmon_create_attr_~attrs.base, 92 + s3c_hwmon_create_attr_~attrs.offset, s3c_hwmon_create_attr_~attr~0.base, s3c_hwmon_create_attr_~attr~0.offset, 8);call write~int(292, s3c_hwmon_create_attr_~attr~0.base, 8 + s3c_hwmon_create_attr_~attr~0.offset, 2);call write~$Pointer$(#funAddr~s3c_hwmon_ch_show.base, #funAddr~s3c_hwmon_ch_show.offset, s3c_hwmon_create_attr_~attr~0.base, 26 + s3c_hwmon_create_attr_~attr~0.offset, 8);ldv_device_create_file_7_#in~ldv_func_arg1.base, ldv_device_create_file_7_#in~ldv_func_arg1.offset, ldv_device_create_file_7_#in~ldv_func_arg2.base, ldv_device_create_file_7_#in~ldv_func_arg2.offset := s3c_hwmon_create_attr_~dev.base, s3c_hwmon_create_attr_~dev.offset, s3c_hwmon_create_attr_~attr~0.base, s3c_hwmon_create_attr_~attr~0.offset;havoc ldv_device_create_file_7_#res;havoc ldv_device_create_file_7_#t~ret138, ldv_device_create_file_7_~ldv_func_arg1.base, ldv_device_create_file_7_~ldv_func_arg1.offset, ldv_device_create_file_7_~ldv_func_arg2.base, ldv_device_create_file_7_~ldv_func_arg2.offset, ldv_device_create_file_7_~tmp~17;ldv_device_create_file_7_~ldv_func_arg1.base, ldv_device_create_file_7_~ldv_func_arg1.offset := ldv_device_create_file_7_#in~ldv_func_arg1.base, ldv_device_create_file_7_#in~ldv_func_arg1.offset;ldv_device_create_file_7_~ldv_func_arg2.base, ldv_device_create_file_7_~ldv_func_arg2.offset := ldv_device_create_file_7_#in~ldv_func_arg2.base, ldv_device_create_file_7_#in~ldv_func_arg2.offset;havoc ldv_device_create_file_7_~tmp~17; VAL [s3c_hwmon_probe_ldv_device_create_file_7_~ldv_func_arg1.base=18446744073709551615, s3c_hwmon_probe_ldv_device_create_file_7_~ldv_func_arg1.offset=12, s3c_hwmon_probe_ldv_device_create_file_7_~ldv_func_arg2.base=5019, s3c_hwmon_probe_ldv_device_create_file_7_~ldv_func_arg2.offset=168, s3c_hwmon_probe_ldv_kzalloc_9_~flags=208, s3c_hwmon_probe_ldv_kzalloc_9_~size=800, s3c_hwmon_probe_ldv_kzalloc_9_~tmp~19.base=5019, s3c_hwmon_probe_ldv_kzalloc_9_~tmp~19.offset=0, s3c_hwmon_probe_ldv_zalloc_~p~1.base=5019, s3c_hwmon_probe_ldv_zalloc_~p~1.offset=0, s3c_hwmon_probe_ldv_zalloc_~size=800, s3c_hwmon_probe_ldv_zalloc_~tmp___0~1=0, s3c_hwmon_probe_ldv_zalloc_~tmp~1.base=5019, s3c_hwmon_probe_ldv_zalloc_~tmp~1.offset=0, s3c_hwmon_probe_platform_set_drvdata_~data.base=5019, s3c_hwmon_probe_platform_set_drvdata_~data.offset=0, s3c_hwmon_probe_platform_set_drvdata_~pdev.base=18446744073709551615, s3c_hwmon_probe_platform_set_drvdata_~pdev.offset=0, s3c_hwmon_probe_s3c_hwmon_add_raw_~dev.base=18446744073709551615, s3c_hwmon_probe_s3c_hwmon_add_raw_~dev.offset=12, s3c_hwmon_probe_s3c_hwmon_create_attr_~attrs.base=5019, s3c_hwmon_probe_s3c_hwmon_create_attr_~attrs.offset=168, s3c_hwmon_probe_s3c_hwmon_create_attr_~attr~0.base=5019, s3c_hwmon_probe_s3c_hwmon_create_attr_~attr~0.offset=168, s3c_hwmon_probe_s3c_hwmon_create_attr_~cfg.base=18446744073709548820, s3c_hwmon_probe_s3c_hwmon_create_attr_~cfg.offset=148, s3c_hwmon_probe_s3c_hwmon_create_attr_~channel=0, s3c_hwmon_probe_s3c_hwmon_create_attr_~dev.base=18446744073709551615, s3c_hwmon_probe_s3c_hwmon_create_attr_~dev.offset=12, s3c_hwmon_probe_~cfg~2.base=18446744073709548820, s3c_hwmon_probe_~cfg~2.offset=148, s3c_hwmon_probe_~dev.base=18446744073709551615, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=5019, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~i~0=0, s3c_hwmon_probe_~pdata~2.base=12376, s3c_hwmon_probe_~pdata~2.offset=(- 143312754708649506517079), s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp___3~0=0, s3c_hwmon_probe_~tmp~10.base=5019, s3c_hwmon_probe_~tmp~10.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |old(~ldv_count_2~0)|=0, |s3c_hwmon_probe_#in~dev.base|=18446744073709551615, |s3c_hwmon_probe_#in~dev.offset|=0, |s3c_hwmon_probe_#t~mem112.base|=18446744073709548820, |s3c_hwmon_probe_#t~mem112.offset|=148, |s3c_hwmon_probe_#t~nondet107|=68, |s3c_hwmon_probe_ldv_device_create_file_7_#in~ldv_func_arg1.base|=18446744073709551615, |s3c_hwmon_probe_ldv_device_create_file_7_#in~ldv_func_arg1.offset|=12, |s3c_hwmon_probe_ldv_device_create_file_7_#in~ldv_func_arg2.base|=5019, |s3c_hwmon_probe_ldv_device_create_file_7_#in~ldv_func_arg2.offset|=168, |s3c_hwmon_probe_ldv_kzalloc_9_#in~flags|=208, |s3c_hwmon_probe_ldv_kzalloc_9_#in~size|=800, |s3c_hwmon_probe_ldv_kzalloc_9_#res.base|=5019, |s3c_hwmon_probe_ldv_kzalloc_9_#res.offset|=0, |s3c_hwmon_probe_ldv_zalloc_#in~size|=800, |s3c_hwmon_probe_ldv_zalloc_#res.base|=5019, |s3c_hwmon_probe_ldv_zalloc_#res.offset|=0, |s3c_hwmon_probe_ldv_zalloc_#t~malloc32.base|=5019, |s3c_hwmon_probe_ldv_zalloc_#t~malloc32.offset|=0, |s3c_hwmon_probe_platform_set_drvdata_#in~data.base|=5019, |s3c_hwmon_probe_platform_set_drvdata_#in~data.offset|=0, |s3c_hwmon_probe_platform_set_drvdata_#in~pdev.base|=18446744073709551615, |s3c_hwmon_probe_platform_set_drvdata_#in~pdev.offset|=0, |s3c_hwmon_probe_s3c_hwmon_add_raw_#in~dev.base|=18446744073709551615, |s3c_hwmon_probe_s3c_hwmon_add_raw_#in~dev.offset|=12, |s3c_hwmon_probe_s3c_hwmon_add_raw_#res|=0, |s3c_hwmon_probe_s3c_hwmon_create_attr_#in~attrs.base|=5019, |s3c_hwmon_probe_s3c_hwmon_create_attr_#in~attrs.offset|=168, |s3c_hwmon_probe_s3c_hwmon_create_attr_#in~cfg.base|=18446744073709548820, |s3c_hwmon_probe_s3c_hwmon_create_attr_#in~cfg.offset|=148, |s3c_hwmon_probe_s3c_hwmon_create_attr_#in~channel|=0, |s3c_hwmon_probe_s3c_hwmon_create_attr_#in~dev.base|=18446744073709551615, |s3c_hwmon_probe_s3c_hwmon_create_attr_#in~dev.offset|=12, |s3c_hwmon_probe_~#__key~0.base|=52, |s3c_hwmon_probe_~#__key~0.offset|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] CALL call ldv_device_create_file_7_#t~ret138 := ldv_device_create_file(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |old(~ldv_count_2~0)|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] havoc ~nondetermined~0;havoc ~tmp~22; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |old(~ldv_count_2~0)|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] CALL call #t~ret143 := ldv_undef_int(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |old(~ldv_count_2~0)|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] havoc ~tmp~4;assume -2147483648 <= #t~nondet35 && #t~nondet35 <= 2147483647;~tmp~4 := #t~nondet35;havoc #t~nondet35;#res := ~tmp~4;assume true; VAL [ldv_undef_int_~tmp~4=(- 1), |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |ldv_undef_int_#res|=(- 1), |old(~ldv_count_2~0)|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] RET #387#return; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |ldv_device_create_file_#t~ret143|=(- 1), |old(~ldv_count_2~0)|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] assume -2147483648 <= #t~ret143 && #t~ret143 <= 2147483647;~nondetermined~0 := #t~ret143;havoc #t~ret143; VAL [ldv_device_create_file_~nondetermined~0=(- 1), |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |old(~ldv_count_2~0)|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] assume 0 != ~nondetermined~0;~ldv_count_2~0 := 1 + ~ldv_count_2~0; VAL [ldv_device_create_file_~nondetermined~0=(- 1), |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |old(~ldv_count_2~0)|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] assume ~ldv_count_1~0 < ~ldv_count_2~0; VAL [ldv_device_create_file_~nondetermined~0=(- 1), |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |old(~ldv_count_2~0)|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] assume !false; VAL [ldv_device_create_file_~nondetermined~0=(- 1), |#NULL.base|=0, |#NULL.offset|=0, |#t~string102.base|=43, |#t~string102.offset|=0, |#t~string108.base|=41, |#t~string108.offset|=0, |#t~string111.base|=38, |#t~string111.offset|=0, |#t~string115.base|=39, |#t~string115.offset|=0, |#t~string121.base|=47, |#t~string121.offset|=0, |#t~string52.base|=29, |#t~string52.offset|=0, |#t~string53.base|=28, |#t~string53.offset|=0, |#t~string65.base|=9, |#t~string65.offset|=0, |#t~string70.base|=23, |#t~string70.offset|=0, |#t~string73.base|=22, |#t~string73.offset|=0, |#t~string76.base|=19, |#t~string76.offset|=0, |#t~string79.base|=18, |#t~string79.offset|=0, |#t~string82.base|=15, |#t~string82.offset|=0, |#t~string85.base|=17, |#t~string85.offset|=0, |#t~string88.base|=35, |#t~string88.offset|=0, |#t~string89.base|=36, |#t~string89.offset|=0, |#t~string94.base|=44, |#t~string94.offset|=0, |old(~ldv_count_2~0)|=0, |~#__this_module~0.base|=7, |~#__this_module~0.offset|=50, |~#s3c_hwmon_driver~0.base|=5, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L938] call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4); [L938] call write~init~int(60, #t~string52.base, #t~string52.offset, 1); [L938] call write~init~int(55, #t~string52.base, 1 + #t~string52.offset, 1); [L938] call write~init~int(62, #t~string52.base, 2 + #t~string52.offset, 1); [L938] call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1); [L938] call #t~string53.base, #t~string53.offset := #Ultimate.alloc(20); [L991] call #t~string65.base, #t~string65.offset := #Ultimate.alloc(4); [L991] call write~init~int(37, #t~string65.base, #t~string65.offset, 1); [L991] call write~init~int(100, #t~string65.base, 1 + #t~string65.offset, 1); [L991] call write~init~int(10, #t~string65.base, 2 + #t~string65.offset, 1); [L991] call write~init~int(0, #t~string65.base, 3 + #t~string65.offset, 1); [L1009] call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4); [L1009] call write~init~int(37, #t~string70.base, #t~string70.offset, 1); [L1009] call write~init~int(115, #t~string70.base, 1 + #t~string70.offset, 1); [L1009] call write~init~int(10, #t~string70.base, 2 + #t~string70.offset, 1); [L1009] call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1); [L1020] call #t~string73.base, #t~string73.offset := #Ultimate.alloc(11); [L1028] call #t~string76.base, #t~string76.offset := #Ultimate.alloc(34); [L1034] call #t~string79.base, #t~string79.offset := #Ultimate.alloc(11); [L1043] call #t~string82.base, #t~string82.offset := #Ultimate.alloc(34); [L1081] call #t~string85.base, #t~string85.offset := #Ultimate.alloc(27); [L1089] call #t~string88.base, #t~string88.offset := #Ultimate.alloc(11); [L1095] call #t~string89.base, #t~string89.offset := #Ultimate.alloc(13); [L1101] call #t~string94.base, #t~string94.offset := #Ultimate.alloc(21); [L1117] call #t~string102.base, #t~string102.offset := #Ultimate.alloc(30); [L1134] call #t~string108.base, #t~string108.offset := #Ultimate.alloc(33); [L1140] call #t~string111.base, #t~string111.offset := #Ultimate.alloc(25); [L1148] call #t~string115.base, #t~string115.offset := #Ultimate.alloc(27); [L1213] call #t~string121.base, #t~string121.offset := #Ultimate.alloc(10); [L888] ~LDV_IN_INTERRUPT~0 := 1; [L889] ~ref_cnt~0 := 0; [L890] ~ldv_state_variable_1~0 := 0; [L892] ~probed_1~0 := 0; [L893] ~ldv_state_variable_0~0 := 0; [L1234] ~ldv_retval_0~0 := 0; [L1235] ~ldv_retval_1~0 := 0; [L1238] ~ldv_retval_2~0 := 0; [L1495] ~ldv_count_1~0 := 0; [L1496] ~ldv_count_2~0 := 0; [L891] ~s3c_hwmon_driver_group1~0.base, ~s3c_hwmon_driver_group1~0.offset := 0, 0; [L1213-L1215] call ~#s3c_hwmon_driver~0.base, ~#s3c_hwmon_driver~0.offset := #Ultimate.alloc(153); [L1213-L1215] call write~init~$Pointer$(#funAddr~s3c_hwmon_probe.base, #funAddr~s3c_hwmon_probe.offset, ~#s3c_hwmon_driver~0.base, ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~$Pointer$(#funAddr~s3c_hwmon_remove.base, #funAddr~s3c_hwmon_remove.offset, ~#s3c_hwmon_driver~0.base, 8 + ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 16 + ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 24 + ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 32 + ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~$Pointer$(#t~string121.base, #t~string121.offset, ~#s3c_hwmon_driver~0.base, 40 + ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 48 + ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#s3c_hwmon_driver~0.base, 56 + ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 64 + ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~int(0, ~#s3c_hwmon_driver~0.base, 72 + ~#s3c_hwmon_driver~0.offset, 1); [L1213-L1215] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 73 + ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 81 + ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 89 + ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 97 + ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 105 + ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 113 + ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 121 + ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 129 + ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 137 + ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 145 + ~#s3c_hwmon_driver~0.offset, 8); [?] havoc main_#res; [?] havoc main_#t~nondet126, main_#t~switch127, main_#t~nondet128, main_#t~switch129, main_#t~ret130, main_#t~ret131, main_#t~ret132, main_#t~nondet133, main_#t~switch134, main_#t~ret135, main_~tmp~14, main_~tmp___0~4, main_~tmp___1~1; [L1267] havoc main_~tmp~14; [L1268] havoc main_~tmp___0~4; [L1269] havoc main_~tmp___1~1; [L1273] ~ldv_state_variable_1~0 := 0; [L1274] ~ref_cnt~0 := 0; [L1275] ~ldv_state_variable_0~0 := 1; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=0, ~s3c_hwmon_driver_group1~0.offset=0] [L1277] assume -2147483648 <= main_#t~nondet126 && main_#t~nondet126 <= 2147483647; [L1277] main_~tmp~14 := main_#t~nondet126; [L1277] havoc main_#t~nondet126; [L1279] main_#t~switch127 := 0 == main_~tmp~14; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, main_#t~switch127=false, main_~tmp~14=1, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=0, ~s3c_hwmon_driver_group1~0.offset=0] [L1279] assume !main_#t~switch127; [L1331] main_#t~switch127 := main_#t~switch127 || 1 == main_~tmp~14; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, main_#t~switch127=true, main_~tmp~14=1, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=0, ~s3c_hwmon_driver_group1~0.offset=0] [L1331] assume main_#t~switch127; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, main_#t~switch127=true, main_~tmp~14=1, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=0, ~s3c_hwmon_driver_group1~0.offset=0] [L1332-L1370] assume 0 != ~ldv_state_variable_0~0; [L1333] assume -2147483648 <= main_#t~nondet133 && main_#t~nondet133 <= 2147483647; [L1333] main_~tmp___1~1 := main_#t~nondet133; [L1333] havoc main_#t~nondet133; [L1335] main_#t~switch134 := 0 == main_~tmp___1~1; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, main_#t~switch127=true, main_#t~switch134=false, main_~tmp___1~1=1, main_~tmp~14=1, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=0, ~s3c_hwmon_driver_group1~0.offset=0] [L1335] assume !main_#t~switch134; [L1344] main_#t~switch134 := main_#t~switch134 || 1 == main_~tmp___1~1; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, main_#t~switch127=true, main_#t~switch134=true, main_~tmp___1~1=1, main_~tmp~14=1, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=0, ~s3c_hwmon_driver_group1~0.offset=0] [L1344] assume main_#t~switch134; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, main_#t~switch127=true, main_#t~switch134=true, main_~tmp___1~1=1, main_~tmp~14=1, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=0, ~s3c_hwmon_driver_group1~0.offset=0] [L1345-L1362] assume 1 == ~ldv_state_variable_0~0; [L1346] havoc s3c_hwmon_init_#res; [L1346] havoc s3c_hwmon_init_#t~ret122, s3c_hwmon_init_~tmp~12; [L1218] havoc s3c_hwmon_init_~tmp~12; [L1221] call s3c_hwmon_init_#t~ret122 := platform_driver_register(~#s3c_hwmon_driver~0.base, ~#s3c_hwmon_driver~0.offset); [L1221] assume -2147483648 <= s3c_hwmon_init_#t~ret122 && s3c_hwmon_init_#t~ret122 <= 2147483647; [L1221] s3c_hwmon_init_~tmp~12 := s3c_hwmon_init_#t~ret122; [L1221] havoc s3c_hwmon_init_#t~ret122; [L1222] s3c_hwmon_init_#res := s3c_hwmon_init_~tmp~12; [L1346] main_#t~ret135 := s3c_hwmon_init_#res; [L1346] assume -2147483648 <= main_#t~ret135 && main_#t~ret135 <= 2147483647; [L1346] ~ldv_retval_2~0 := main_#t~ret135; [L1346] havoc main_#t~ret135; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, main_#t~switch127=true, main_#t~switch134=true, main_~tmp___1~1=1, main_~tmp~14=1, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~12=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=0, ~s3c_hwmon_driver_group1~0.offset=0] [L1347-L1352] assume !(0 != ~ldv_retval_2~0); [L1353-L1359] assume 0 == ~ldv_retval_2~0; [L1354] ~ldv_state_variable_0~0 := 2; [L1355] ~ldv_state_variable_1~0 := 1; [L1356] havoc ldv_platform_driver_init_1_#t~ret125.base, ldv_platform_driver_init_1_#t~ret125.offset, ldv_platform_driver_init_1_~tmp~13.base, ldv_platform_driver_init_1_~tmp~13.offset; [L1256] havoc ldv_platform_driver_init_1_~tmp~13.base, ldv_platform_driver_init_1_~tmp~13.offset; [L1259] ldv_malloc_#in~size := 624; [L1259] havoc ldv_malloc_#res.base, ldv_malloc_#res.offset; [L1259] havoc ldv_malloc_#t~nondet29, ldv_malloc_#t~malloc30.base, ldv_malloc_#t~malloc30.offset, ldv_malloc_~size, ldv_malloc_~p~0.base, ldv_malloc_~p~0.offset, ldv_malloc_~tmp~0.base, ldv_malloc_~tmp~0.offset, ldv_malloc_~tmp___0~0; [L795-L812] ldv_malloc_~size := ldv_malloc_#in~size; [L797] havoc ldv_malloc_~p~0.base, ldv_malloc_~p~0.offset; [L798] havoc ldv_malloc_~tmp~0.base, ldv_malloc_~tmp~0.offset; [L799] havoc ldv_malloc_~tmp___0~0; [L802] assume -2147483648 <= ldv_malloc_#t~nondet29 && ldv_malloc_#t~nondet29 <= 2147483647; [L802] ldv_malloc_~tmp___0~0 := ldv_malloc_#t~nondet29; [L802] havoc ldv_malloc_#t~nondet29; [L803-L810] assume !(0 != ldv_malloc_~tmp___0~0); [L806] call ldv_malloc_#t~malloc30.base, ldv_malloc_#t~malloc30.offset := #Ultimate.alloc(ldv_malloc_~size); [L806] ldv_malloc_~tmp~0.base, ldv_malloc_~tmp~0.offset := ldv_malloc_#t~malloc30.base, ldv_malloc_#t~malloc30.offset; [L807] ldv_malloc_~p~0.base, ldv_malloc_~p~0.offset := ldv_malloc_~tmp~0.base, ldv_malloc_~tmp~0.offset; [L808] assume 0 != (if 0 != (ldv_malloc_~p~0.base + ldv_malloc_~p~0.offset) % 18446744073709551616 then 1 else 0); [L809] ldv_malloc_#res.base, ldv_malloc_#res.offset := ldv_malloc_~p~0.base, ldv_malloc_~p~0.offset; [L1259] ldv_platform_driver_init_1_#t~ret125.base, ldv_platform_driver_init_1_#t~ret125.offset := ldv_malloc_#res.base, ldv_malloc_#res.offset; [L1259] ldv_platform_driver_init_1_~tmp~13.base, ldv_platform_driver_init_1_~tmp~13.offset := ldv_platform_driver_init_1_#t~ret125.base, ldv_platform_driver_init_1_#t~ret125.offset; [L1259] havoc ldv_platform_driver_init_1_#t~ret125.base, ldv_platform_driver_init_1_#t~ret125.offset; [L1260] assume 0 != (if 0 != (ldv_platform_driver_init_1_~tmp~13.base + ldv_platform_driver_init_1_~tmp~13.offset) % 18446744073709551616 then 1 else 0); [L1261] ~s3c_hwmon_driver_group1~0.base, ~s3c_hwmon_driver_group1~0.offset := ldv_platform_driver_init_1_~tmp~13.base, ldv_platform_driver_init_1_~tmp~13.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_malloc_#in~size=624, ldv_malloc_#res.base=18446744073709551615, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc30.base=18446744073709551615, ldv_malloc_#t~malloc30.offset=0, ldv_malloc_#t~nondet29=0, ldv_malloc_~p~0.base=18446744073709551615, ldv_malloc_~p~0.offset=0, ldv_malloc_~size=624, ldv_malloc_~tmp___0~0=0, ldv_malloc_~tmp~0.base=18446744073709551615, ldv_malloc_~tmp~0.offset=0, ldv_platform_driver_init_1_#t~ret125.base=0, ldv_platform_driver_init_1_#t~ret125.offset=0, ldv_platform_driver_init_1_~tmp~13.base=18446744073709551615, ldv_platform_driver_init_1_~tmp~13.offset=0, main_#t~switch127=true, main_#t~switch134=true, main_~tmp___1~1=1, main_~tmp~14=1, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~12=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1277] assume -2147483648 <= main_#t~nondet126 && main_#t~nondet126 <= 2147483647; [L1277] main_~tmp~14 := main_#t~nondet126; [L1277] havoc main_#t~nondet126; [L1279] main_#t~switch127 := 0 == main_~tmp~14; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_malloc_#in~size=624, ldv_malloc_#res.base=18446744073709551615, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc30.base=18446744073709551615, ldv_malloc_#t~malloc30.offset=0, ldv_malloc_#t~nondet29=0, ldv_malloc_~p~0.base=18446744073709551615, ldv_malloc_~p~0.offset=0, ldv_malloc_~size=624, ldv_malloc_~tmp___0~0=0, ldv_malloc_~tmp~0.base=18446744073709551615, ldv_malloc_~tmp~0.offset=0, ldv_platform_driver_init_1_#t~ret125.base=0, ldv_platform_driver_init_1_#t~ret125.offset=0, ldv_platform_driver_init_1_~tmp~13.base=18446744073709551615, ldv_platform_driver_init_1_~tmp~13.offset=0, main_#t~switch127=true, main_#t~switch134=true, main_~tmp___1~1=1, main_~tmp~14=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~12=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1279] assume main_#t~switch127; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_malloc_#in~size=624, ldv_malloc_#res.base=18446744073709551615, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc30.base=18446744073709551615, ldv_malloc_#t~malloc30.offset=0, ldv_malloc_#t~nondet29=0, ldv_malloc_~p~0.base=18446744073709551615, ldv_malloc_~p~0.offset=0, ldv_malloc_~size=624, ldv_malloc_~tmp___0~0=0, ldv_malloc_~tmp~0.base=18446744073709551615, ldv_malloc_~tmp~0.offset=0, ldv_platform_driver_init_1_#t~ret125.base=0, ldv_platform_driver_init_1_#t~ret125.offset=0, ldv_platform_driver_init_1_~tmp~13.base=18446744073709551615, ldv_platform_driver_init_1_~tmp~13.offset=0, main_#t~switch127=true, main_#t~switch134=true, main_~tmp___1~1=1, main_~tmp~14=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~12=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1280-L1329] assume 0 != ~ldv_state_variable_1~0; [L1281] assume -2147483648 <= main_#t~nondet128 && main_#t~nondet128 <= 2147483647; [L1281] main_~tmp___0~4 := main_#t~nondet128; [L1281] havoc main_#t~nondet128; [L1283] main_#t~switch129 := 0 == main_~tmp___0~4; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_malloc_#in~size=624, ldv_malloc_#res.base=18446744073709551615, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc30.base=18446744073709551615, ldv_malloc_#t~malloc30.offset=0, ldv_malloc_#t~nondet29=0, ldv_malloc_~p~0.base=18446744073709551615, ldv_malloc_~p~0.offset=0, ldv_malloc_~size=624, ldv_malloc_~tmp___0~0=0, ldv_malloc_~tmp~0.base=18446744073709551615, ldv_malloc_~tmp~0.offset=0, ldv_platform_driver_init_1_#t~ret125.base=0, ldv_platform_driver_init_1_#t~ret125.offset=0, ldv_platform_driver_init_1_~tmp~13.base=18446744073709551615, ldv_platform_driver_init_1_~tmp~13.offset=0, main_#t~switch127=true, main_#t~switch129=true, main_#t~switch134=true, main_~tmp___0~4=0, main_~tmp___1~1=1, main_~tmp~14=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~12=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1283] assume main_#t~switch129; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_malloc_#in~size=624, ldv_malloc_#res.base=18446744073709551615, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc30.base=18446744073709551615, ldv_malloc_#t~malloc30.offset=0, ldv_malloc_#t~nondet29=0, ldv_malloc_~p~0.base=18446744073709551615, ldv_malloc_~p~0.offset=0, ldv_malloc_~size=624, ldv_malloc_~tmp___0~0=0, ldv_malloc_~tmp~0.base=18446744073709551615, ldv_malloc_~tmp~0.offset=0, ldv_platform_driver_init_1_#t~ret125.base=0, ldv_platform_driver_init_1_#t~ret125.offset=0, ldv_platform_driver_init_1_~tmp~13.base=18446744073709551615, ldv_platform_driver_init_1_~tmp~13.offset=0, main_#t~switch127=true, main_#t~switch129=true, main_#t~switch134=true, main_~tmp___0~4=0, main_~tmp___1~1=1, main_~tmp~14=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~12=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1284-L1295] assume 1 == ~ldv_state_variable_1~0; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_malloc_#in~size=624, ldv_malloc_#res.base=18446744073709551615, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc30.base=18446744073709551615, ldv_malloc_#t~malloc30.offset=0, ldv_malloc_#t~nondet29=0, ldv_malloc_~p~0.base=18446744073709551615, ldv_malloc_~p~0.offset=0, ldv_malloc_~size=624, ldv_malloc_~tmp___0~0=0, ldv_malloc_~tmp~0.base=18446744073709551615, ldv_malloc_~tmp~0.offset=0, ldv_platform_driver_init_1_#t~ret125.base=0, ldv_platform_driver_init_1_#t~ret125.offset=0, ldv_platform_driver_init_1_~tmp~13.base=18446744073709551615, ldv_platform_driver_init_1_~tmp~13.offset=0, main_#t~switch127=true, main_#t~switch129=true, main_#t~switch134=true, main_~tmp___0~4=0, main_~tmp___1~1=1, main_~tmp~14=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~12=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1285] CALL call main_#t~ret130 := s3c_hwmon_probe(~s3c_hwmon_driver_group1~0.base, ~s3c_hwmon_driver_group1~0.offset); VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1063-L1186] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L1065] havoc ~pdata~2.base, ~pdata~2.offset; [L1066] havoc ~hwmon~1.base, ~hwmon~1.offset; [L1067] havoc ~ret~3; [L1068] havoc ~i~0; [L1069] havoc ~tmp~10.base, ~tmp~10.offset; [L1070] call ~#__key~0.base, ~#__key~0.offset := #Ultimate.alloc(8); [L1071] havoc ~tmp___0~3; [L1072] havoc ~tmp___1~0; [L1073] havoc ~tmp___2~0; [L1074] havoc ~tmp___3~0; [L1075] havoc ~cfg~2.base, ~cfg~2.offset; [L1078] call #t~mem83.base, #t~mem83.offset := read~$Pointer$(~dev.base, 277 + ~dev.offset, 8); [L1078] ~pdata~2.base, ~pdata~2.offset := #t~mem83.base, #t~mem83.offset; [L1078] havoc #t~mem83.base, #t~mem83.offset; [L1079] ~ret~3 := 0; VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__key~0.base=52, ~#__key~0.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~dev.base=18446744073709551615, ~dev.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2.base=12376, ~pdata~2.offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1080-L1085] assume !(0 == (~pdata~2.base + ~pdata~2.offset) % 18446744073709551616); [L1086] ldv_kzalloc_9_#in~size, ldv_kzalloc_9_#in~flags := 800, 208; [L1086] havoc ldv_kzalloc_9_#res.base, ldv_kzalloc_9_#res.offset; [L1086] havoc ldv_kzalloc_9_#t~ret140.base, ldv_kzalloc_9_#t~ret140.offset, ldv_kzalloc_9_~size, ldv_kzalloc_9_~flags, ldv_kzalloc_9_~tmp~19.base, ldv_kzalloc_9_~tmp~19.offset; [L1418-L1426] ldv_kzalloc_9_~size := ldv_kzalloc_9_#in~size; [L1418-L1426] ldv_kzalloc_9_~flags := ldv_kzalloc_9_#in~flags; [L1420] havoc ldv_kzalloc_9_~tmp~19.base, ldv_kzalloc_9_~tmp~19.offset; [L1423] ldv_zalloc_#in~size := ldv_kzalloc_9_~size; [L1423] havoc ldv_zalloc_#res.base, ldv_zalloc_#res.offset; [L1423] havoc ldv_zalloc_#t~nondet31, ldv_zalloc_#t~malloc32.base, ldv_zalloc_#t~malloc32.offset, ldv_zalloc_~size, ldv_zalloc_~p~1.base, ldv_zalloc_~p~1.offset, ldv_zalloc_~tmp~1.base, ldv_zalloc_~tmp~1.offset, ldv_zalloc_~tmp___0~1; [L813-L830] ldv_zalloc_~size := ldv_zalloc_#in~size; [L815] havoc ldv_zalloc_~p~1.base, ldv_zalloc_~p~1.offset; [L816] havoc ldv_zalloc_~tmp~1.base, ldv_zalloc_~tmp~1.offset; [L817] havoc ldv_zalloc_~tmp___0~1; [L820] assume -2147483648 <= ldv_zalloc_#t~nondet31 && ldv_zalloc_#t~nondet31 <= 2147483647; [L820] ldv_zalloc_~tmp___0~1 := ldv_zalloc_#t~nondet31; [L820] havoc ldv_zalloc_#t~nondet31; VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_zalloc_#in~size=800, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, old(~ldv_count_2~0)=0, ~#__key~0.base=52, ~#__key~0.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~dev.base=18446744073709551615, ~dev.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2.base=12376, ~pdata~2.offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L821-L828] assume !(0 != ldv_zalloc_~tmp___0~1); [L824] call ldv_zalloc_#t~malloc32.base, ldv_zalloc_#t~malloc32.offset := #Ultimate.alloc((if ldv_zalloc_~size % 4294967296 % 4294967296 <= 2147483647 then ldv_zalloc_~size % 4294967296 % 4294967296 else ldv_zalloc_~size % 4294967296 % 4294967296 - 4294967296)); VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_zalloc_#in~size=800, ldv_zalloc_#t~malloc32.base=5019, ldv_zalloc_#t~malloc32.offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, old(~ldv_count_2~0)=0, ~#__key~0.base=52, ~#__key~0.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~dev.base=18446744073709551615, ~dev.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2.base=12376, ~pdata~2.offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L824] CALL call #Ultimate.meminit(ldv_zalloc_#t~malloc32.base, ldv_zalloc_#t~malloc32.offset, 1, (if ldv_zalloc_~size % 4294967296 % 4294967296 <= 2147483647 then ldv_zalloc_~size % 4294967296 % 4294967296 else ldv_zalloc_~size % 4294967296 % 4294967296 - 4294967296), (if ldv_zalloc_~size % 4294967296 % 4294967296 <= 2147483647 then ldv_zalloc_~size % 4294967296 % 4294967296 else ldv_zalloc_~size % 4294967296 % 4294967296 - 4294967296)); VAL [#amountOfFields=1, #NULL.base=0, #NULL.offset=0, #product=800, #ptr.base=5019, #ptr.offset=0, #sizeOfFields=800, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] #memory_int := ~initToZeroAtPointerBaseAddress~int(#memory_int, #ptr.base); [?] ensures true; VAL [#amountOfFields=1, #NULL.base=0, #NULL.offset=0, #product=800, #ptr.base=5019, #ptr.offset=0, #sizeOfFields=800, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L824] RET call #Ultimate.meminit(ldv_zalloc_#t~malloc32.base, ldv_zalloc_#t~malloc32.offset, 1, (if ldv_zalloc_~size % 4294967296 % 4294967296 <= 2147483647 then ldv_zalloc_~size % 4294967296 % 4294967296 else ldv_zalloc_~size % 4294967296 % 4294967296 - 4294967296), (if ldv_zalloc_~size % 4294967296 % 4294967296 <= 2147483647 then ldv_zalloc_~size % 4294967296 % 4294967296 else ldv_zalloc_~size % 4294967296 % 4294967296 - 4294967296)); VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_zalloc_#in~size=800, ldv_zalloc_#t~malloc32.base=5019, ldv_zalloc_#t~malloc32.offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, old(~ldv_count_2~0)=0, ~#__key~0.base=52, ~#__key~0.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~dev.base=18446744073709551615, ~dev.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2.base=12376, ~pdata~2.offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L824] ldv_zalloc_~tmp~1.base, ldv_zalloc_~tmp~1.offset := ldv_zalloc_#t~malloc32.base, ldv_zalloc_#t~malloc32.offset; [L825] ldv_zalloc_~p~1.base, ldv_zalloc_~p~1.offset := ldv_zalloc_~tmp~1.base, ldv_zalloc_~tmp~1.offset; [L826] assume 0 != (if 0 != (ldv_zalloc_~p~1.base + ldv_zalloc_~p~1.offset) % 18446744073709551616 then 1 else 0); [L827] ldv_zalloc_#res.base, ldv_zalloc_#res.offset := ldv_zalloc_~p~1.base, ldv_zalloc_~p~1.offset; VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_zalloc_#in~size=800, ldv_zalloc_#res.base=5019, ldv_zalloc_#res.offset=0, ldv_zalloc_#t~malloc32.base=5019, ldv_zalloc_#t~malloc32.offset=0, ldv_zalloc_~p~1.base=5019, ldv_zalloc_~p~1.offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1.base=5019, ldv_zalloc_~tmp~1.offset=0, old(~ldv_count_2~0)=0, ~#__key~0.base=52, ~#__key~0.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~dev.base=18446744073709551615, ~dev.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2.base=12376, ~pdata~2.offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1423] ldv_kzalloc_9_#t~ret140.base, ldv_kzalloc_9_#t~ret140.offset := ldv_zalloc_#res.base, ldv_zalloc_#res.offset; [L1423] ldv_kzalloc_9_~tmp~19.base, ldv_kzalloc_9_~tmp~19.offset := ldv_kzalloc_9_#t~ret140.base, ldv_kzalloc_9_#t~ret140.offset; [L1423] havoc ldv_kzalloc_9_#t~ret140.base, ldv_kzalloc_9_#t~ret140.offset; [L1424] ldv_kzalloc_9_#res.base, ldv_kzalloc_9_#res.offset := ldv_kzalloc_9_~tmp~19.base, ldv_kzalloc_9_~tmp~19.offset; [L1086] #t~ret86.base, #t~ret86.offset := ldv_kzalloc_9_#res.base, ldv_kzalloc_9_#res.offset; [L1086] ~tmp~10.base, ~tmp~10.offset := #t~ret86.base, #t~ret86.offset; [L1086] havoc #t~ret86.base, #t~ret86.offset; [L1087] ~hwmon~1.base, ~hwmon~1.offset := ~tmp~10.base, ~tmp~10.offset; VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res.base=5019, ldv_kzalloc_9_#res.offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19.base=5019, ldv_kzalloc_9_~tmp~19.offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res.base=5019, ldv_zalloc_#res.offset=0, ldv_zalloc_#t~malloc32.base=5019, ldv_zalloc_#t~malloc32.offset=0, ldv_zalloc_~p~1.base=5019, ldv_zalloc_~p~1.offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1.base=5019, ldv_zalloc_~tmp~1.offset=0, old(~ldv_count_2~0)=0, ~#__key~0.base=52, ~#__key~0.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~dev.base=18446744073709551615, ~dev.offset=0, ~hwmon~1.base=5019, ~hwmon~1.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2.base=12376, ~pdata~2.offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0, ~tmp~10.base=5019, ~tmp~10.offset=0] [L1088-L1093] assume !(0 == (~hwmon~1.base + ~hwmon~1.offset) % 18446744073709551616); [L1094] platform_set_drvdata_#in~pdev.base, platform_set_drvdata_#in~pdev.offset, platform_set_drvdata_#in~data.base, platform_set_drvdata_#in~data.offset := ~dev.base, ~dev.offset, ~hwmon~1.base, ~hwmon~1.offset; [L1094] havoc platform_set_drvdata_~pdev.base, platform_set_drvdata_~pdev.offset, platform_set_drvdata_~data.base, platform_set_drvdata_~data.offset; [L909-L917] platform_set_drvdata_~pdev.base, platform_set_drvdata_~pdev.offset := platform_set_drvdata_#in~pdev.base, platform_set_drvdata_#in~pdev.offset; [L909-L917] platform_set_drvdata_~data.base, platform_set_drvdata_~data.offset := platform_set_drvdata_#in~data.base, platform_set_drvdata_#in~data.offset; [L914] call dev_set_drvdata(platform_set_drvdata_~pdev.base, 12 + platform_set_drvdata_~pdev.offset, platform_set_drvdata_~data.base, platform_set_drvdata_~data.offset); [L1095] call __mutex_init(~hwmon~1.base, ~hwmon~1.offset, #t~string89.base, #t~string89.offset, ~#__key~0.base, ~#__key~0.offset); [L1096-L1098] call #t~ret90.base, #t~ret90.offset := s3c_adc_register(~dev.base, ~dev.offset, 0, 0, 0, 0, 0); [L1096-L1098] call write~$Pointer$(#t~ret90.base, #t~ret90.offset, ~hwmon~1.base, 152 + ~hwmon~1.offset, 8); [L1096-L1098] havoc #t~ret90.base, #t~ret90.offset; [L1099] call #t~mem91.base, #t~mem91.offset := read~$Pointer$(~hwmon~1.base, 152 + ~hwmon~1.offset, 8); VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem91.base=18446744073709551616, #t~mem91.offset=-18446744073709551616, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res.base=5019, ldv_kzalloc_9_#res.offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19.base=5019, ldv_kzalloc_9_~tmp~19.offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res.base=5019, ldv_zalloc_#res.offset=0, ldv_zalloc_#t~malloc32.base=5019, ldv_zalloc_#t~malloc32.offset=0, ldv_zalloc_~p~1.base=5019, ldv_zalloc_~p~1.offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1.base=5019, ldv_zalloc_~tmp~1.offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data.base=5019, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=18446744073709551615, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=5019, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=18446744073709551615, platform_set_drvdata_~pdev.offset=0, ~#__key~0.base=52, ~#__key~0.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~dev.base=18446744073709551615, ~dev.offset=0, ~hwmon~1.base=5019, ~hwmon~1.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2.base=12376, ~pdata~2.offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0, ~tmp~10.base=5019, ~tmp~10.offset=0] [L1099] CALL call #t~ret92 := IS_ERR(#t~mem91.base, #t~mem91.offset); VAL [#in~ptr.base=18446744073709551616, #in~ptr.offset=-18446744073709551616, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1391-L1399] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L1393] havoc ~tmp~16; VAL [#in~ptr.base=18446744073709551616, #in~ptr.offset=-18446744073709551616, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ptr.base=18446744073709551616, ~ptr.offset=-18446744073709551616, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1396] CALL call #t~ret137 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=18446744073709551616, #in~ptr.offset=-18446744073709551616, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1452-L1459] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L1457] #res := (if 0 == (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0) then 0 else 1); [L769] ensures true; VAL [#in~ptr.base=18446744073709551616, #in~ptr.offset=-18446744073709551616, #NULL.base=0, #NULL.offset=0, #res=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ptr.base=18446744073709551616, ~ptr.offset=-18446744073709551616, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1396] RET call #t~ret137 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=18446744073709551616, #in~ptr.offset=-18446744073709551616, #NULL.base=0, #NULL.offset=0, #t~ret137=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ptr.base=18446744073709551616, ~ptr.offset=-18446744073709551616, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1396] ~tmp~16 := #t~ret137; [L1396] havoc #t~ret137; [L1397] #res := ~tmp~16 % 256; [L897] ensures true; VAL [#in~ptr.base=18446744073709551616, #in~ptr.offset=-18446744073709551616, #NULL.base=0, #NULL.offset=0, #res=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ptr.base=18446744073709551616, ~ptr.offset=-18446744073709551616, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0, ~tmp~16=0] [L1099] RET call #t~ret92 := IS_ERR(#t~mem91.base, #t~mem91.offset); VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem91.base=18446744073709551616, #t~mem91.offset=-18446744073709551616, #t~ret92=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res.base=5019, ldv_kzalloc_9_#res.offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19.base=5019, ldv_kzalloc_9_~tmp~19.offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res.base=5019, ldv_zalloc_#res.offset=0, ldv_zalloc_#t~malloc32.base=5019, ldv_zalloc_#t~malloc32.offset=0, ldv_zalloc_~p~1.base=5019, ldv_zalloc_~p~1.offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1.base=5019, ldv_zalloc_~tmp~1.offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data.base=5019, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=18446744073709551615, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=5019, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=18446744073709551615, platform_set_drvdata_~pdev.offset=0, ~#__key~0.base=52, ~#__key~0.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~dev.base=18446744073709551615, ~dev.offset=0, ~hwmon~1.base=5019, ~hwmon~1.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2.base=12376, ~pdata~2.offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0, ~tmp~10.base=5019, ~tmp~10.offset=0] [L1099] assume -9223372036854775808 <= #t~ret92 && #t~ret92 <= 9223372036854775807; [L1099] ~tmp___1~0 := #t~ret92; [L1099] havoc #t~ret92; [L1099] havoc #t~mem91.base, #t~mem91.offset; VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res.base=5019, ldv_kzalloc_9_#res.offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19.base=5019, ldv_kzalloc_9_~tmp~19.offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res.base=5019, ldv_zalloc_#res.offset=0, ldv_zalloc_#t~malloc32.base=5019, ldv_zalloc_#t~malloc32.offset=0, ldv_zalloc_~p~1.base=5019, ldv_zalloc_~p~1.offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1.base=5019, ldv_zalloc_~tmp~1.offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data.base=5019, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=18446744073709551615, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=5019, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=18446744073709551615, platform_set_drvdata_~pdev.offset=0, ~#__key~0.base=52, ~#__key~0.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~dev.base=18446744073709551615, ~dev.offset=0, ~hwmon~1.base=5019, ~hwmon~1.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2.base=12376, ~pdata~2.offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0, ~tmp___1~0=0, ~tmp~10.base=5019, ~tmp~10.offset=0] [L1100-L1107] assume !(0 != ~tmp___1~0); [L1108] s3c_hwmon_add_raw_#in~dev.base, s3c_hwmon_add_raw_#in~dev.offset := ~dev.base, 12 + ~dev.offset; [L1108] havoc s3c_hwmon_add_raw_#res; [L1108] havoc s3c_hwmon_add_raw_~dev.base, s3c_hwmon_add_raw_~dev.offset; [L944-L951] s3c_hwmon_add_raw_~dev.base, s3c_hwmon_add_raw_~dev.offset := s3c_hwmon_add_raw_#in~dev.base, s3c_hwmon_add_raw_#in~dev.offset; [L949] s3c_hwmon_add_raw_#res := 0; [L1108] #t~ret97 := s3c_hwmon_add_raw_#res; [L1108] assume -2147483648 <= #t~ret97 && #t~ret97 <= 2147483647; [L1108] ~ret~3 := #t~ret97; [L1108] havoc #t~ret97; VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res.base=5019, ldv_kzalloc_9_#res.offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19.base=5019, ldv_kzalloc_9_~tmp~19.offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res.base=5019, ldv_zalloc_#res.offset=0, ldv_zalloc_#t~malloc32.base=5019, ldv_zalloc_#t~malloc32.offset=0, ldv_zalloc_~p~1.base=5019, ldv_zalloc_~p~1.offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1.base=5019, ldv_zalloc_~tmp~1.offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data.base=5019, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=18446744073709551615, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=5019, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=18446744073709551615, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_add_raw_#in~dev.base=18446744073709551615, s3c_hwmon_add_raw_#in~dev.offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev.base=18446744073709551615, s3c_hwmon_add_raw_~dev.offset=12, ~#__key~0.base=52, ~#__key~0.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~dev.base=18446744073709551615, ~dev.offset=0, ~hwmon~1.base=5019, ~hwmon~1.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2.base=12376, ~pdata~2.offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0, ~tmp___1~0=0, ~tmp~10.base=5019, ~tmp~10.offset=0] [L1109-L1113] assume !(0 != ~ret~3); [L1114] call #t~ret98.base, #t~ret98.offset := hwmon_device_register(~dev.base, 12 + ~dev.offset); [L1114] call write~$Pointer$(#t~ret98.base, #t~ret98.offset, ~hwmon~1.base, 160 + ~hwmon~1.offset, 8); [L1114] havoc #t~ret98.base, #t~ret98.offset; [L1115] call #t~mem99.base, #t~mem99.offset := read~$Pointer$(~hwmon~1.base, 160 + ~hwmon~1.offset, 8); VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem99.base=9223372036854775808, #t~mem99.offset=27670116110564327424, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res.base=5019, ldv_kzalloc_9_#res.offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19.base=5019, ldv_kzalloc_9_~tmp~19.offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res.base=5019, ldv_zalloc_#res.offset=0, ldv_zalloc_#t~malloc32.base=5019, ldv_zalloc_#t~malloc32.offset=0, ldv_zalloc_~p~1.base=5019, ldv_zalloc_~p~1.offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1.base=5019, ldv_zalloc_~tmp~1.offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data.base=5019, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=18446744073709551615, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=5019, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=18446744073709551615, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_add_raw_#in~dev.base=18446744073709551615, s3c_hwmon_add_raw_#in~dev.offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev.base=18446744073709551615, s3c_hwmon_add_raw_~dev.offset=12, ~#__key~0.base=52, ~#__key~0.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~dev.base=18446744073709551615, ~dev.offset=0, ~hwmon~1.base=5019, ~hwmon~1.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2.base=12376, ~pdata~2.offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0, ~tmp___1~0=0, ~tmp~10.base=5019, ~tmp~10.offset=0] [L1115] CALL call #t~ret100 := IS_ERR(#t~mem99.base, #t~mem99.offset); VAL [#in~ptr.base=9223372036854775808, #in~ptr.offset=27670116110564327424, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1391-L1399] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L1393] havoc ~tmp~16; VAL [#in~ptr.base=9223372036854775808, #in~ptr.offset=27670116110564327424, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ptr.base=9223372036854775808, ~ptr.offset=27670116110564327424, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1396] CALL call #t~ret137 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=9223372036854775808, #in~ptr.offset=27670116110564327424, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1452-L1459] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L1457] #res := (if 0 == (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0) then 0 else 1); [L769] ensures true; VAL [#in~ptr.base=9223372036854775808, #in~ptr.offset=27670116110564327424, #NULL.base=0, #NULL.offset=0, #res=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ptr.base=9223372036854775808, ~ptr.offset=27670116110564327424, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1396] RET call #t~ret137 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=9223372036854775808, #in~ptr.offset=27670116110564327424, #NULL.base=0, #NULL.offset=0, #t~ret137=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ptr.base=9223372036854775808, ~ptr.offset=27670116110564327424, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1396] ~tmp~16 := #t~ret137; [L1396] havoc #t~ret137; [L1397] #res := ~tmp~16 % 256; [L897] ensures true; VAL [#in~ptr.base=9223372036854775808, #in~ptr.offset=27670116110564327424, #NULL.base=0, #NULL.offset=0, #res=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ptr.base=9223372036854775808, ~ptr.offset=27670116110564327424, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0, ~tmp~16=0] [L1115] RET call #t~ret100 := IS_ERR(#t~mem99.base, #t~mem99.offset); VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem99.base=9223372036854775808, #t~mem99.offset=27670116110564327424, #t~ret100=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res.base=5019, ldv_kzalloc_9_#res.offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19.base=5019, ldv_kzalloc_9_~tmp~19.offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res.base=5019, ldv_zalloc_#res.offset=0, ldv_zalloc_#t~malloc32.base=5019, ldv_zalloc_#t~malloc32.offset=0, ldv_zalloc_~p~1.base=5019, ldv_zalloc_~p~1.offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1.base=5019, ldv_zalloc_~tmp~1.offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data.base=5019, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=18446744073709551615, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=5019, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=18446744073709551615, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_add_raw_#in~dev.base=18446744073709551615, s3c_hwmon_add_raw_#in~dev.offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev.base=18446744073709551615, s3c_hwmon_add_raw_~dev.offset=12, ~#__key~0.base=52, ~#__key~0.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~dev.base=18446744073709551615, ~dev.offset=0, ~hwmon~1.base=5019, ~hwmon~1.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2.base=12376, ~pdata~2.offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0, ~tmp___1~0=0, ~tmp~10.base=5019, ~tmp~10.offset=0] [L1115] assume -9223372036854775808 <= #t~ret100 && #t~ret100 <= 9223372036854775807; [L1115] ~tmp___3~0 := #t~ret100; [L1115] havoc #t~mem99.base, #t~mem99.offset; [L1115] havoc #t~ret100; VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res.base=5019, ldv_kzalloc_9_#res.offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19.base=5019, ldv_kzalloc_9_~tmp~19.offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res.base=5019, ldv_zalloc_#res.offset=0, ldv_zalloc_#t~malloc32.base=5019, ldv_zalloc_#t~malloc32.offset=0, ldv_zalloc_~p~1.base=5019, ldv_zalloc_~p~1.offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1.base=5019, ldv_zalloc_~tmp~1.offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data.base=5019, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=18446744073709551615, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=5019, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=18446744073709551615, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_add_raw_#in~dev.base=18446744073709551615, s3c_hwmon_add_raw_#in~dev.offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev.base=18446744073709551615, s3c_hwmon_add_raw_~dev.offset=12, ~#__key~0.base=52, ~#__key~0.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~dev.base=18446744073709551615, ~dev.offset=0, ~hwmon~1.base=5019, ~hwmon~1.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2.base=12376, ~pdata~2.offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0, ~tmp___1~0=0, ~tmp___3~0=0, ~tmp~10.base=5019, ~tmp~10.offset=0] [L1116-L1123] assume !(0 != ~tmp___3~0); [L1124] ~i~0 := 0; VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res.base=5019, ldv_kzalloc_9_#res.offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19.base=5019, ldv_kzalloc_9_~tmp~19.offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res.base=5019, ldv_zalloc_#res.offset=0, ldv_zalloc_#t~malloc32.base=5019, ldv_zalloc_#t~malloc32.offset=0, ldv_zalloc_~p~1.base=5019, ldv_zalloc_~p~1.offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1.base=5019, ldv_zalloc_~tmp~1.offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data.base=5019, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=18446744073709551615, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=5019, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=18446744073709551615, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_add_raw_#in~dev.base=18446744073709551615, s3c_hwmon_add_raw_#in~dev.offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev.base=18446744073709551615, s3c_hwmon_add_raw_~dev.offset=12, ~#__key~0.base=52, ~#__key~0.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~dev.base=18446744073709551615, ~dev.offset=0, ~hwmon~1.base=5019, ~hwmon~1.offset=0, ~i~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2.base=12376, ~pdata~2.offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0, ~tmp___1~0=0, ~tmp___3~0=0, ~tmp~10.base=5019, ~tmp~10.offset=0] [L1169-L1173] assume ~i~0 % 4294967296 <= 7; [L1127] call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~pdata~2.base, ~pdata~2.offset + 8 * ~i~0, 8); [L1127] ~cfg~2.base, ~cfg~2.offset := #t~mem105.base, #t~mem105.offset; [L1127] havoc #t~mem105.base, #t~mem105.offset; VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res.base=5019, ldv_kzalloc_9_#res.offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19.base=5019, ldv_kzalloc_9_~tmp~19.offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res.base=5019, ldv_zalloc_#res.offset=0, ldv_zalloc_#t~malloc32.base=5019, ldv_zalloc_#t~malloc32.offset=0, ldv_zalloc_~p~1.base=5019, ldv_zalloc_~p~1.offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1.base=5019, ldv_zalloc_~tmp~1.offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data.base=5019, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=18446744073709551615, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=5019, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=18446744073709551615, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_add_raw_#in~dev.base=18446744073709551615, s3c_hwmon_add_raw_#in~dev.offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev.base=18446744073709551615, s3c_hwmon_add_raw_~dev.offset=12, ~#__key~0.base=52, ~#__key~0.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~cfg~2.base=18446744073709548820, ~cfg~2.offset=148, ~dev.base=18446744073709551615, ~dev.offset=0, ~hwmon~1.base=5019, ~hwmon~1.offset=0, ~i~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2.base=12376, ~pdata~2.offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0, ~tmp___1~0=0, ~tmp___3~0=0, ~tmp~10.base=5019, ~tmp~10.offset=0] [L1128-L1132] assume !(0 == (~cfg~2.base + ~cfg~2.offset) % 18446744073709551616); [L1133] call #t~mem106 := read~int(~cfg~2.base, 8 + ~cfg~2.offset, 4); [L1133-L1138] assume !(#t~mem106 % 4294967296 > 65535); [L1133] havoc #t~mem106; [L1139] call #t~mem109 := read~int(~cfg~2.base, 12 + ~cfg~2.offset, 4); VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem109=25778393710593, #t~nondet107=68, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res.base=5019, ldv_kzalloc_9_#res.offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19.base=5019, ldv_kzalloc_9_~tmp~19.offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res.base=5019, ldv_zalloc_#res.offset=0, ldv_zalloc_#t~malloc32.base=5019, ldv_zalloc_#t~malloc32.offset=0, ldv_zalloc_~p~1.base=5019, ldv_zalloc_~p~1.offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1.base=5019, ldv_zalloc_~tmp~1.offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data.base=5019, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=18446744073709551615, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=5019, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=18446744073709551615, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_add_raw_#in~dev.base=18446744073709551615, s3c_hwmon_add_raw_#in~dev.offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev.base=18446744073709551615, s3c_hwmon_add_raw_~dev.offset=12, ~#__key~0.base=52, ~#__key~0.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~cfg~2.base=18446744073709548820, ~cfg~2.offset=148, ~dev.base=18446744073709551615, ~dev.offset=0, ~hwmon~1.base=5019, ~hwmon~1.offset=0, ~i~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2.base=12376, ~pdata~2.offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0, ~tmp___1~0=0, ~tmp___3~0=0, ~tmp~10.base=5019, ~tmp~10.offset=0] [L1139-L1144] assume !(0 == #t~mem109 % 4294967296); [L1139] havoc #t~mem109; [L1145] call #t~mem112.base, #t~mem112.offset := read~$Pointer$(~pdata~2.base, ~pdata~2.offset + 8 * ~i~0, 8); [L1145-L1146] s3c_hwmon_create_attr_#in~dev.base, s3c_hwmon_create_attr_#in~dev.offset, s3c_hwmon_create_attr_#in~cfg.base, s3c_hwmon_create_attr_#in~cfg.offset, s3c_hwmon_create_attr_#in~attrs.base, s3c_hwmon_create_attr_#in~attrs.offset, s3c_hwmon_create_attr_#in~channel := ~dev.base, 12 + ~dev.offset, #t~mem112.base, #t~mem112.offset, ~hwmon~1.base, 168 + ~hwmon~1.offset + 116 * (~i~0 % 4294967296), ~i~0; [L1145-L1146] havoc s3c_hwmon_create_attr_#res; [L1145-L1146] havoc s3c_hwmon_create_attr_#t~nondet72, s3c_hwmon_create_attr_#t~ret74, s3c_hwmon_create_attr_#t~nondet75, s3c_hwmon_create_attr_#t~mem77.base, s3c_hwmon_create_attr_#t~mem77.offset, s3c_hwmon_create_attr_#t~nondet78, s3c_hwmon_create_attr_#t~ret80, s3c_hwmon_create_attr_#t~nondet81, s3c_hwmon_create_attr_~dev.base, s3c_hwmon_create_attr_~dev.offset, s3c_hwmon_create_attr_~cfg.base, s3c_hwmon_create_attr_~cfg.offset, s3c_hwmon_create_attr_~attrs.base, s3c_hwmon_create_attr_~attrs.offset, s3c_hwmon_create_attr_~channel, s3c_hwmon_create_attr_~attr~0.base, s3c_hwmon_create_attr_~attr~0.offset, s3c_hwmon_create_attr_~ret~2; [L1013-L1052] s3c_hwmon_create_attr_~dev.base, s3c_hwmon_create_attr_~dev.offset := s3c_hwmon_create_attr_#in~dev.base, s3c_hwmon_create_attr_#in~dev.offset; [L1013-L1052] s3c_hwmon_create_attr_~cfg.base, s3c_hwmon_create_attr_~cfg.offset := s3c_hwmon_create_attr_#in~cfg.base, s3c_hwmon_create_attr_#in~cfg.offset; [L1013-L1052] s3c_hwmon_create_attr_~attrs.base, s3c_hwmon_create_attr_~attrs.offset := s3c_hwmon_create_attr_#in~attrs.base, s3c_hwmon_create_attr_#in~attrs.offset; [L1013-L1052] s3c_hwmon_create_attr_~channel := s3c_hwmon_create_attr_#in~channel; [L1016] havoc s3c_hwmon_create_attr_~attr~0.base, s3c_hwmon_create_attr_~attr~0.offset; [L1017] havoc s3c_hwmon_create_attr_~ret~2; [L1020] havoc s3c_hwmon_create_attr_#t~nondet72; [L1021] s3c_hwmon_create_attr_~attr~0.base, s3c_hwmon_create_attr_~attr~0.offset := s3c_hwmon_create_attr_~attrs.base, s3c_hwmon_create_attr_~attrs.offset; [L1022] call write~int(s3c_hwmon_create_attr_~channel, s3c_hwmon_create_attr_~attr~0.base, 42 + s3c_hwmon_create_attr_~attr~0.offset, 4); [L1023] call write~$Pointer$(s3c_hwmon_create_attr_~attrs.base, 92 + s3c_hwmon_create_attr_~attrs.offset, s3c_hwmon_create_attr_~attr~0.base, s3c_hwmon_create_attr_~attr~0.offset, 8); [L1024] call write~int(292, s3c_hwmon_create_attr_~attr~0.base, 8 + s3c_hwmon_create_attr_~attr~0.offset, 2); [L1025] call write~$Pointer$(#funAddr~s3c_hwmon_ch_show.base, #funAddr~s3c_hwmon_ch_show.offset, s3c_hwmon_create_attr_~attr~0.base, 26 + s3c_hwmon_create_attr_~attr~0.offset, 8); [L1026] ldv_device_create_file_7_#in~ldv_func_arg1.base, ldv_device_create_file_7_#in~ldv_func_arg1.offset, ldv_device_create_file_7_#in~ldv_func_arg2.base, ldv_device_create_file_7_#in~ldv_func_arg2.offset := s3c_hwmon_create_attr_~dev.base, s3c_hwmon_create_attr_~dev.offset, s3c_hwmon_create_attr_~attr~0.base, s3c_hwmon_create_attr_~attr~0.offset; [L1026] havoc ldv_device_create_file_7_#res; [L1026] havoc ldv_device_create_file_7_#t~ret138, ldv_device_create_file_7_~ldv_func_arg1.base, ldv_device_create_file_7_~ldv_func_arg1.offset, ldv_device_create_file_7_~ldv_func_arg2.base, ldv_device_create_file_7_~ldv_func_arg2.offset, ldv_device_create_file_7_~tmp~17; [L1400-L1408] ldv_device_create_file_7_~ldv_func_arg1.base, ldv_device_create_file_7_~ldv_func_arg1.offset := ldv_device_create_file_7_#in~ldv_func_arg1.base, ldv_device_create_file_7_#in~ldv_func_arg1.offset; [L1400-L1408] ldv_device_create_file_7_~ldv_func_arg2.base, ldv_device_create_file_7_~ldv_func_arg2.offset := ldv_device_create_file_7_#in~ldv_func_arg2.base, ldv_device_create_file_7_#in~ldv_func_arg2.offset; [L1402] havoc ldv_device_create_file_7_~tmp~17; VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem112.base=18446744073709548820, #t~mem112.offset=148, #t~nondet107=68, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_device_create_file_7_#in~ldv_func_arg1.base=18446744073709551615, ldv_device_create_file_7_#in~ldv_func_arg1.offset=12, ldv_device_create_file_7_#in~ldv_func_arg2.base=5019, ldv_device_create_file_7_#in~ldv_func_arg2.offset=168, ldv_device_create_file_7_~ldv_func_arg1.base=18446744073709551615, ldv_device_create_file_7_~ldv_func_arg1.offset=12, ldv_device_create_file_7_~ldv_func_arg2.base=5019, ldv_device_create_file_7_~ldv_func_arg2.offset=168, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res.base=5019, ldv_kzalloc_9_#res.offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19.base=5019, ldv_kzalloc_9_~tmp~19.offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res.base=5019, ldv_zalloc_#res.offset=0, ldv_zalloc_#t~malloc32.base=5019, ldv_zalloc_#t~malloc32.offset=0, ldv_zalloc_~p~1.base=5019, ldv_zalloc_~p~1.offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1.base=5019, ldv_zalloc_~tmp~1.offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data.base=5019, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=18446744073709551615, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=5019, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=18446744073709551615, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_add_raw_#in~dev.base=18446744073709551615, s3c_hwmon_add_raw_#in~dev.offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev.base=18446744073709551615, s3c_hwmon_add_raw_~dev.offset=12, s3c_hwmon_create_attr_#in~attrs.base=5019, s3c_hwmon_create_attr_#in~attrs.offset=168, s3c_hwmon_create_attr_#in~cfg.base=18446744073709548820, s3c_hwmon_create_attr_#in~cfg.offset=148, s3c_hwmon_create_attr_#in~channel=0, s3c_hwmon_create_attr_#in~dev.base=18446744073709551615, s3c_hwmon_create_attr_#in~dev.offset=12, s3c_hwmon_create_attr_~attrs.base=5019, s3c_hwmon_create_attr_~attrs.offset=168, s3c_hwmon_create_attr_~attr~0.base=5019, s3c_hwmon_create_attr_~attr~0.offset=168, s3c_hwmon_create_attr_~cfg.base=18446744073709548820, s3c_hwmon_create_attr_~cfg.offset=148, s3c_hwmon_create_attr_~channel=0, s3c_hwmon_create_attr_~dev.base=18446744073709551615, s3c_hwmon_create_attr_~dev.offset=12, ~#__key~0.base=52, ~#__key~0.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~cfg~2.base=18446744073709548820, ~cfg~2.offset=148, ~dev.base=18446744073709551615, ~dev.offset=0, ~hwmon~1.base=5019, ~hwmon~1.offset=0, ~i~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2.base=12376, ~pdata~2.offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0, ~tmp___1~0=0, ~tmp___3~0=0, ~tmp~10.base=5019, ~tmp~10.offset=0] [L1405] CALL call ldv_device_create_file_7_#t~ret138 := ldv_device_create_file(); VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1508] havoc ~nondetermined~0; [L1509] havoc ~tmp~22; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1512] CALL call #t~ret143 := ldv_undef_int(); VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L854] havoc ~tmp~4; [L857] assume -2147483648 <= #t~nondet35 && #t~nondet35 <= 2147483647; [L857] ~tmp~4 := #t~nondet35; [L857] havoc #t~nondet35; [L858] #res := ~tmp~4; [L852-L860] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #res=-1, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0, ~tmp~4=-1] [L1512] RET call #t~ret143 := ldv_undef_int(); VAL [#NULL.base=0, #NULL.offset=0, #t~ret143=-1, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1512] assume -2147483648 <= #t~ret143 && #t~ret143 <= 2147483647; [L1512] ~nondetermined~0 := #t~ret143; [L1512] havoc #t~ret143; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~nondetermined~0=-1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1513-L1524] assume 0 != ~nondetermined~0; [L1514] ~ldv_count_2~0 := 1 + ~ldv_count_2~0; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~nondetermined~0=-1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1515-L1519] assume ~ldv_count_1~0 < ~ldv_count_2~0; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~nondetermined~0=-1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1433] assert false; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~nondetermined~0=-1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L938] call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4); [L938] call write~init~int(60, #t~string52.base, #t~string52.offset, 1); [L938] call write~init~int(55, #t~string52.base, 1 + #t~string52.offset, 1); [L938] call write~init~int(62, #t~string52.base, 2 + #t~string52.offset, 1); [L938] call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1); [L938] call #t~string53.base, #t~string53.offset := #Ultimate.alloc(20); [L991] call #t~string65.base, #t~string65.offset := #Ultimate.alloc(4); [L991] call write~init~int(37, #t~string65.base, #t~string65.offset, 1); [L991] call write~init~int(100, #t~string65.base, 1 + #t~string65.offset, 1); [L991] call write~init~int(10, #t~string65.base, 2 + #t~string65.offset, 1); [L991] call write~init~int(0, #t~string65.base, 3 + #t~string65.offset, 1); [L1009] call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4); [L1009] call write~init~int(37, #t~string70.base, #t~string70.offset, 1); [L1009] call write~init~int(115, #t~string70.base, 1 + #t~string70.offset, 1); [L1009] call write~init~int(10, #t~string70.base, 2 + #t~string70.offset, 1); [L1009] call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1); [L1020] call #t~string73.base, #t~string73.offset := #Ultimate.alloc(11); [L1028] call #t~string76.base, #t~string76.offset := #Ultimate.alloc(34); [L1034] call #t~string79.base, #t~string79.offset := #Ultimate.alloc(11); [L1043] call #t~string82.base, #t~string82.offset := #Ultimate.alloc(34); [L1081] call #t~string85.base, #t~string85.offset := #Ultimate.alloc(27); [L1089] call #t~string88.base, #t~string88.offset := #Ultimate.alloc(11); [L1095] call #t~string89.base, #t~string89.offset := #Ultimate.alloc(13); [L1101] call #t~string94.base, #t~string94.offset := #Ultimate.alloc(21); [L1117] call #t~string102.base, #t~string102.offset := #Ultimate.alloc(30); [L1134] call #t~string108.base, #t~string108.offset := #Ultimate.alloc(33); [L1140] call #t~string111.base, #t~string111.offset := #Ultimate.alloc(25); [L1148] call #t~string115.base, #t~string115.offset := #Ultimate.alloc(27); [L1213] call #t~string121.base, #t~string121.offset := #Ultimate.alloc(10); [L888] ~LDV_IN_INTERRUPT~0 := 1; [L889] ~ref_cnt~0 := 0; [L890] ~ldv_state_variable_1~0 := 0; [L892] ~probed_1~0 := 0; [L893] ~ldv_state_variable_0~0 := 0; [L1234] ~ldv_retval_0~0 := 0; [L1235] ~ldv_retval_1~0 := 0; [L1238] ~ldv_retval_2~0 := 0; [L1495] ~ldv_count_1~0 := 0; [L1496] ~ldv_count_2~0 := 0; [L891] ~s3c_hwmon_driver_group1~0.base, ~s3c_hwmon_driver_group1~0.offset := 0, 0; [L1213-L1215] call ~#s3c_hwmon_driver~0.base, ~#s3c_hwmon_driver~0.offset := #Ultimate.alloc(153); [L1213-L1215] call write~init~$Pointer$(#funAddr~s3c_hwmon_probe.base, #funAddr~s3c_hwmon_probe.offset, ~#s3c_hwmon_driver~0.base, ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~$Pointer$(#funAddr~s3c_hwmon_remove.base, #funAddr~s3c_hwmon_remove.offset, ~#s3c_hwmon_driver~0.base, 8 + ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 16 + ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 24 + ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 32 + ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~$Pointer$(#t~string121.base, #t~string121.offset, ~#s3c_hwmon_driver~0.base, 40 + ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 48 + ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#s3c_hwmon_driver~0.base, 56 + ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 64 + ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~int(0, ~#s3c_hwmon_driver~0.base, 72 + ~#s3c_hwmon_driver~0.offset, 1); [L1213-L1215] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 73 + ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 81 + ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 89 + ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 97 + ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 105 + ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 113 + ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 121 + ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 129 + ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 137 + ~#s3c_hwmon_driver~0.offset, 8); [L1213-L1215] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 145 + ~#s3c_hwmon_driver~0.offset, 8); [?] havoc main_#res; [?] havoc main_#t~nondet126, main_#t~switch127, main_#t~nondet128, main_#t~switch129, main_#t~ret130, main_#t~ret131, main_#t~ret132, main_#t~nondet133, main_#t~switch134, main_#t~ret135, main_~tmp~14, main_~tmp___0~4, main_~tmp___1~1; [L1267] havoc main_~tmp~14; [L1268] havoc main_~tmp___0~4; [L1269] havoc main_~tmp___1~1; [L1273] ~ldv_state_variable_1~0 := 0; [L1274] ~ref_cnt~0 := 0; [L1275] ~ldv_state_variable_0~0 := 1; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=0, ~s3c_hwmon_driver_group1~0.offset=0] [L1277] assume -2147483648 <= main_#t~nondet126 && main_#t~nondet126 <= 2147483647; [L1277] main_~tmp~14 := main_#t~nondet126; [L1277] havoc main_#t~nondet126; [L1279] main_#t~switch127 := 0 == main_~tmp~14; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, main_#t~switch127=false, main_~tmp~14=1, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=0, ~s3c_hwmon_driver_group1~0.offset=0] [L1279] assume !main_#t~switch127; [L1331] main_#t~switch127 := main_#t~switch127 || 1 == main_~tmp~14; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, main_#t~switch127=true, main_~tmp~14=1, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=0, ~s3c_hwmon_driver_group1~0.offset=0] [L1331] assume main_#t~switch127; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, main_#t~switch127=true, main_~tmp~14=1, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=0, ~s3c_hwmon_driver_group1~0.offset=0] [L1332-L1370] assume 0 != ~ldv_state_variable_0~0; [L1333] assume -2147483648 <= main_#t~nondet133 && main_#t~nondet133 <= 2147483647; [L1333] main_~tmp___1~1 := main_#t~nondet133; [L1333] havoc main_#t~nondet133; [L1335] main_#t~switch134 := 0 == main_~tmp___1~1; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, main_#t~switch127=true, main_#t~switch134=false, main_~tmp___1~1=1, main_~tmp~14=1, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=0, ~s3c_hwmon_driver_group1~0.offset=0] [L1335] assume !main_#t~switch134; [L1344] main_#t~switch134 := main_#t~switch134 || 1 == main_~tmp___1~1; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, main_#t~switch127=true, main_#t~switch134=true, main_~tmp___1~1=1, main_~tmp~14=1, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=0, ~s3c_hwmon_driver_group1~0.offset=0] [L1344] assume main_#t~switch134; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, main_#t~switch127=true, main_#t~switch134=true, main_~tmp___1~1=1, main_~tmp~14=1, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=0, ~s3c_hwmon_driver_group1~0.offset=0] [L1345-L1362] assume 1 == ~ldv_state_variable_0~0; [L1346] havoc s3c_hwmon_init_#res; [L1346] havoc s3c_hwmon_init_#t~ret122, s3c_hwmon_init_~tmp~12; [L1218] havoc s3c_hwmon_init_~tmp~12; [L1221] call s3c_hwmon_init_#t~ret122 := platform_driver_register(~#s3c_hwmon_driver~0.base, ~#s3c_hwmon_driver~0.offset); [L1221] assume -2147483648 <= s3c_hwmon_init_#t~ret122 && s3c_hwmon_init_#t~ret122 <= 2147483647; [L1221] s3c_hwmon_init_~tmp~12 := s3c_hwmon_init_#t~ret122; [L1221] havoc s3c_hwmon_init_#t~ret122; [L1222] s3c_hwmon_init_#res := s3c_hwmon_init_~tmp~12; [L1346] main_#t~ret135 := s3c_hwmon_init_#res; [L1346] assume -2147483648 <= main_#t~ret135 && main_#t~ret135 <= 2147483647; [L1346] ~ldv_retval_2~0 := main_#t~ret135; [L1346] havoc main_#t~ret135; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, main_#t~switch127=true, main_#t~switch134=true, main_~tmp___1~1=1, main_~tmp~14=1, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~12=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=0, ~s3c_hwmon_driver_group1~0.offset=0] [L1347-L1352] assume !(0 != ~ldv_retval_2~0); [L1353-L1359] assume 0 == ~ldv_retval_2~0; [L1354] ~ldv_state_variable_0~0 := 2; [L1355] ~ldv_state_variable_1~0 := 1; [L1356] havoc ldv_platform_driver_init_1_#t~ret125.base, ldv_platform_driver_init_1_#t~ret125.offset, ldv_platform_driver_init_1_~tmp~13.base, ldv_platform_driver_init_1_~tmp~13.offset; [L1256] havoc ldv_platform_driver_init_1_~tmp~13.base, ldv_platform_driver_init_1_~tmp~13.offset; [L1259] ldv_malloc_#in~size := 624; [L1259] havoc ldv_malloc_#res.base, ldv_malloc_#res.offset; [L1259] havoc ldv_malloc_#t~nondet29, ldv_malloc_#t~malloc30.base, ldv_malloc_#t~malloc30.offset, ldv_malloc_~size, ldv_malloc_~p~0.base, ldv_malloc_~p~0.offset, ldv_malloc_~tmp~0.base, ldv_malloc_~tmp~0.offset, ldv_malloc_~tmp___0~0; [L795-L812] ldv_malloc_~size := ldv_malloc_#in~size; [L797] havoc ldv_malloc_~p~0.base, ldv_malloc_~p~0.offset; [L798] havoc ldv_malloc_~tmp~0.base, ldv_malloc_~tmp~0.offset; [L799] havoc ldv_malloc_~tmp___0~0; [L802] assume -2147483648 <= ldv_malloc_#t~nondet29 && ldv_malloc_#t~nondet29 <= 2147483647; [L802] ldv_malloc_~tmp___0~0 := ldv_malloc_#t~nondet29; [L802] havoc ldv_malloc_#t~nondet29; [L803-L810] assume !(0 != ldv_malloc_~tmp___0~0); [L806] call ldv_malloc_#t~malloc30.base, ldv_malloc_#t~malloc30.offset := #Ultimate.alloc(ldv_malloc_~size); [L806] ldv_malloc_~tmp~0.base, ldv_malloc_~tmp~0.offset := ldv_malloc_#t~malloc30.base, ldv_malloc_#t~malloc30.offset; [L807] ldv_malloc_~p~0.base, ldv_malloc_~p~0.offset := ldv_malloc_~tmp~0.base, ldv_malloc_~tmp~0.offset; [L808] assume 0 != (if 0 != (ldv_malloc_~p~0.base + ldv_malloc_~p~0.offset) % 18446744073709551616 then 1 else 0); [L809] ldv_malloc_#res.base, ldv_malloc_#res.offset := ldv_malloc_~p~0.base, ldv_malloc_~p~0.offset; [L1259] ldv_platform_driver_init_1_#t~ret125.base, ldv_platform_driver_init_1_#t~ret125.offset := ldv_malloc_#res.base, ldv_malloc_#res.offset; [L1259] ldv_platform_driver_init_1_~tmp~13.base, ldv_platform_driver_init_1_~tmp~13.offset := ldv_platform_driver_init_1_#t~ret125.base, ldv_platform_driver_init_1_#t~ret125.offset; [L1259] havoc ldv_platform_driver_init_1_#t~ret125.base, ldv_platform_driver_init_1_#t~ret125.offset; [L1260] assume 0 != (if 0 != (ldv_platform_driver_init_1_~tmp~13.base + ldv_platform_driver_init_1_~tmp~13.offset) % 18446744073709551616 then 1 else 0); [L1261] ~s3c_hwmon_driver_group1~0.base, ~s3c_hwmon_driver_group1~0.offset := ldv_platform_driver_init_1_~tmp~13.base, ldv_platform_driver_init_1_~tmp~13.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_malloc_#in~size=624, ldv_malloc_#res.base=18446744073709551615, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc30.base=18446744073709551615, ldv_malloc_#t~malloc30.offset=0, ldv_malloc_#t~nondet29=0, ldv_malloc_~p~0.base=18446744073709551615, ldv_malloc_~p~0.offset=0, ldv_malloc_~size=624, ldv_malloc_~tmp___0~0=0, ldv_malloc_~tmp~0.base=18446744073709551615, ldv_malloc_~tmp~0.offset=0, ldv_platform_driver_init_1_#t~ret125.base=0, ldv_platform_driver_init_1_#t~ret125.offset=0, ldv_platform_driver_init_1_~tmp~13.base=18446744073709551615, ldv_platform_driver_init_1_~tmp~13.offset=0, main_#t~switch127=true, main_#t~switch134=true, main_~tmp___1~1=1, main_~tmp~14=1, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~12=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1277] assume -2147483648 <= main_#t~nondet126 && main_#t~nondet126 <= 2147483647; [L1277] main_~tmp~14 := main_#t~nondet126; [L1277] havoc main_#t~nondet126; [L1279] main_#t~switch127 := 0 == main_~tmp~14; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_malloc_#in~size=624, ldv_malloc_#res.base=18446744073709551615, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc30.base=18446744073709551615, ldv_malloc_#t~malloc30.offset=0, ldv_malloc_#t~nondet29=0, ldv_malloc_~p~0.base=18446744073709551615, ldv_malloc_~p~0.offset=0, ldv_malloc_~size=624, ldv_malloc_~tmp___0~0=0, ldv_malloc_~tmp~0.base=18446744073709551615, ldv_malloc_~tmp~0.offset=0, ldv_platform_driver_init_1_#t~ret125.base=0, ldv_platform_driver_init_1_#t~ret125.offset=0, ldv_platform_driver_init_1_~tmp~13.base=18446744073709551615, ldv_platform_driver_init_1_~tmp~13.offset=0, main_#t~switch127=true, main_#t~switch134=true, main_~tmp___1~1=1, main_~tmp~14=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~12=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1279] assume main_#t~switch127; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_malloc_#in~size=624, ldv_malloc_#res.base=18446744073709551615, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc30.base=18446744073709551615, ldv_malloc_#t~malloc30.offset=0, ldv_malloc_#t~nondet29=0, ldv_malloc_~p~0.base=18446744073709551615, ldv_malloc_~p~0.offset=0, ldv_malloc_~size=624, ldv_malloc_~tmp___0~0=0, ldv_malloc_~tmp~0.base=18446744073709551615, ldv_malloc_~tmp~0.offset=0, ldv_platform_driver_init_1_#t~ret125.base=0, ldv_platform_driver_init_1_#t~ret125.offset=0, ldv_platform_driver_init_1_~tmp~13.base=18446744073709551615, ldv_platform_driver_init_1_~tmp~13.offset=0, main_#t~switch127=true, main_#t~switch134=true, main_~tmp___1~1=1, main_~tmp~14=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~12=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1280-L1329] assume 0 != ~ldv_state_variable_1~0; [L1281] assume -2147483648 <= main_#t~nondet128 && main_#t~nondet128 <= 2147483647; [L1281] main_~tmp___0~4 := main_#t~nondet128; [L1281] havoc main_#t~nondet128; [L1283] main_#t~switch129 := 0 == main_~tmp___0~4; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_malloc_#in~size=624, ldv_malloc_#res.base=18446744073709551615, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc30.base=18446744073709551615, ldv_malloc_#t~malloc30.offset=0, ldv_malloc_#t~nondet29=0, ldv_malloc_~p~0.base=18446744073709551615, ldv_malloc_~p~0.offset=0, ldv_malloc_~size=624, ldv_malloc_~tmp___0~0=0, ldv_malloc_~tmp~0.base=18446744073709551615, ldv_malloc_~tmp~0.offset=0, ldv_platform_driver_init_1_#t~ret125.base=0, ldv_platform_driver_init_1_#t~ret125.offset=0, ldv_platform_driver_init_1_~tmp~13.base=18446744073709551615, ldv_platform_driver_init_1_~tmp~13.offset=0, main_#t~switch127=true, main_#t~switch129=true, main_#t~switch134=true, main_~tmp___0~4=0, main_~tmp___1~1=1, main_~tmp~14=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~12=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1283] assume main_#t~switch129; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_malloc_#in~size=624, ldv_malloc_#res.base=18446744073709551615, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc30.base=18446744073709551615, ldv_malloc_#t~malloc30.offset=0, ldv_malloc_#t~nondet29=0, ldv_malloc_~p~0.base=18446744073709551615, ldv_malloc_~p~0.offset=0, ldv_malloc_~size=624, ldv_malloc_~tmp___0~0=0, ldv_malloc_~tmp~0.base=18446744073709551615, ldv_malloc_~tmp~0.offset=0, ldv_platform_driver_init_1_#t~ret125.base=0, ldv_platform_driver_init_1_#t~ret125.offset=0, ldv_platform_driver_init_1_~tmp~13.base=18446744073709551615, ldv_platform_driver_init_1_~tmp~13.offset=0, main_#t~switch127=true, main_#t~switch129=true, main_#t~switch134=true, main_~tmp___0~4=0, main_~tmp___1~1=1, main_~tmp~14=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~12=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1284-L1295] assume 1 == ~ldv_state_variable_1~0; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_malloc_#in~size=624, ldv_malloc_#res.base=18446744073709551615, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc30.base=18446744073709551615, ldv_malloc_#t~malloc30.offset=0, ldv_malloc_#t~nondet29=0, ldv_malloc_~p~0.base=18446744073709551615, ldv_malloc_~p~0.offset=0, ldv_malloc_~size=624, ldv_malloc_~tmp___0~0=0, ldv_malloc_~tmp~0.base=18446744073709551615, ldv_malloc_~tmp~0.offset=0, ldv_platform_driver_init_1_#t~ret125.base=0, ldv_platform_driver_init_1_#t~ret125.offset=0, ldv_platform_driver_init_1_~tmp~13.base=18446744073709551615, ldv_platform_driver_init_1_~tmp~13.offset=0, main_#t~switch127=true, main_#t~switch129=true, main_#t~switch134=true, main_~tmp___0~4=0, main_~tmp___1~1=1, main_~tmp~14=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~12=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1285] CALL call main_#t~ret130 := s3c_hwmon_probe(~s3c_hwmon_driver_group1~0.base, ~s3c_hwmon_driver_group1~0.offset); VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1063-L1186] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L1065] havoc ~pdata~2.base, ~pdata~2.offset; [L1066] havoc ~hwmon~1.base, ~hwmon~1.offset; [L1067] havoc ~ret~3; [L1068] havoc ~i~0; [L1069] havoc ~tmp~10.base, ~tmp~10.offset; [L1070] call ~#__key~0.base, ~#__key~0.offset := #Ultimate.alloc(8); [L1071] havoc ~tmp___0~3; [L1072] havoc ~tmp___1~0; [L1073] havoc ~tmp___2~0; [L1074] havoc ~tmp___3~0; [L1075] havoc ~cfg~2.base, ~cfg~2.offset; [L1078] call #t~mem83.base, #t~mem83.offset := read~$Pointer$(~dev.base, 277 + ~dev.offset, 8); [L1078] ~pdata~2.base, ~pdata~2.offset := #t~mem83.base, #t~mem83.offset; [L1078] havoc #t~mem83.base, #t~mem83.offset; [L1079] ~ret~3 := 0; VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__key~0.base=52, ~#__key~0.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~dev.base=18446744073709551615, ~dev.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2.base=12376, ~pdata~2.offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1080-L1085] assume !(0 == (~pdata~2.base + ~pdata~2.offset) % 18446744073709551616); [L1086] ldv_kzalloc_9_#in~size, ldv_kzalloc_9_#in~flags := 800, 208; [L1086] havoc ldv_kzalloc_9_#res.base, ldv_kzalloc_9_#res.offset; [L1086] havoc ldv_kzalloc_9_#t~ret140.base, ldv_kzalloc_9_#t~ret140.offset, ldv_kzalloc_9_~size, ldv_kzalloc_9_~flags, ldv_kzalloc_9_~tmp~19.base, ldv_kzalloc_9_~tmp~19.offset; [L1418-L1426] ldv_kzalloc_9_~size := ldv_kzalloc_9_#in~size; [L1418-L1426] ldv_kzalloc_9_~flags := ldv_kzalloc_9_#in~flags; [L1420] havoc ldv_kzalloc_9_~tmp~19.base, ldv_kzalloc_9_~tmp~19.offset; [L1423] ldv_zalloc_#in~size := ldv_kzalloc_9_~size; [L1423] havoc ldv_zalloc_#res.base, ldv_zalloc_#res.offset; [L1423] havoc ldv_zalloc_#t~nondet31, ldv_zalloc_#t~malloc32.base, ldv_zalloc_#t~malloc32.offset, ldv_zalloc_~size, ldv_zalloc_~p~1.base, ldv_zalloc_~p~1.offset, ldv_zalloc_~tmp~1.base, ldv_zalloc_~tmp~1.offset, ldv_zalloc_~tmp___0~1; [L813-L830] ldv_zalloc_~size := ldv_zalloc_#in~size; [L815] havoc ldv_zalloc_~p~1.base, ldv_zalloc_~p~1.offset; [L816] havoc ldv_zalloc_~tmp~1.base, ldv_zalloc_~tmp~1.offset; [L817] havoc ldv_zalloc_~tmp___0~1; [L820] assume -2147483648 <= ldv_zalloc_#t~nondet31 && ldv_zalloc_#t~nondet31 <= 2147483647; [L820] ldv_zalloc_~tmp___0~1 := ldv_zalloc_#t~nondet31; [L820] havoc ldv_zalloc_#t~nondet31; VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_zalloc_#in~size=800, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, old(~ldv_count_2~0)=0, ~#__key~0.base=52, ~#__key~0.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~dev.base=18446744073709551615, ~dev.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2.base=12376, ~pdata~2.offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L821-L828] assume !(0 != ldv_zalloc_~tmp___0~1); [L824] call ldv_zalloc_#t~malloc32.base, ldv_zalloc_#t~malloc32.offset := #Ultimate.alloc((if ldv_zalloc_~size % 4294967296 % 4294967296 <= 2147483647 then ldv_zalloc_~size % 4294967296 % 4294967296 else ldv_zalloc_~size % 4294967296 % 4294967296 - 4294967296)); VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_zalloc_#in~size=800, ldv_zalloc_#t~malloc32.base=5019, ldv_zalloc_#t~malloc32.offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, old(~ldv_count_2~0)=0, ~#__key~0.base=52, ~#__key~0.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~dev.base=18446744073709551615, ~dev.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2.base=12376, ~pdata~2.offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L824] CALL call #Ultimate.meminit(ldv_zalloc_#t~malloc32.base, ldv_zalloc_#t~malloc32.offset, 1, (if ldv_zalloc_~size % 4294967296 % 4294967296 <= 2147483647 then ldv_zalloc_~size % 4294967296 % 4294967296 else ldv_zalloc_~size % 4294967296 % 4294967296 - 4294967296), (if ldv_zalloc_~size % 4294967296 % 4294967296 <= 2147483647 then ldv_zalloc_~size % 4294967296 % 4294967296 else ldv_zalloc_~size % 4294967296 % 4294967296 - 4294967296)); VAL [#amountOfFields=1, #NULL.base=0, #NULL.offset=0, #product=800, #ptr.base=5019, #ptr.offset=0, #sizeOfFields=800, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] #memory_int := ~initToZeroAtPointerBaseAddress~int(#memory_int, #ptr.base); [?] ensures true; VAL [#amountOfFields=1, #NULL.base=0, #NULL.offset=0, #product=800, #ptr.base=5019, #ptr.offset=0, #sizeOfFields=800, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L824] RET call #Ultimate.meminit(ldv_zalloc_#t~malloc32.base, ldv_zalloc_#t~malloc32.offset, 1, (if ldv_zalloc_~size % 4294967296 % 4294967296 <= 2147483647 then ldv_zalloc_~size % 4294967296 % 4294967296 else ldv_zalloc_~size % 4294967296 % 4294967296 - 4294967296), (if ldv_zalloc_~size % 4294967296 % 4294967296 <= 2147483647 then ldv_zalloc_~size % 4294967296 % 4294967296 else ldv_zalloc_~size % 4294967296 % 4294967296 - 4294967296)); VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_zalloc_#in~size=800, ldv_zalloc_#t~malloc32.base=5019, ldv_zalloc_#t~malloc32.offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, old(~ldv_count_2~0)=0, ~#__key~0.base=52, ~#__key~0.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~dev.base=18446744073709551615, ~dev.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2.base=12376, ~pdata~2.offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L824] ldv_zalloc_~tmp~1.base, ldv_zalloc_~tmp~1.offset := ldv_zalloc_#t~malloc32.base, ldv_zalloc_#t~malloc32.offset; [L825] ldv_zalloc_~p~1.base, ldv_zalloc_~p~1.offset := ldv_zalloc_~tmp~1.base, ldv_zalloc_~tmp~1.offset; [L826] assume 0 != (if 0 != (ldv_zalloc_~p~1.base + ldv_zalloc_~p~1.offset) % 18446744073709551616 then 1 else 0); [L827] ldv_zalloc_#res.base, ldv_zalloc_#res.offset := ldv_zalloc_~p~1.base, ldv_zalloc_~p~1.offset; VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_zalloc_#in~size=800, ldv_zalloc_#res.base=5019, ldv_zalloc_#res.offset=0, ldv_zalloc_#t~malloc32.base=5019, ldv_zalloc_#t~malloc32.offset=0, ldv_zalloc_~p~1.base=5019, ldv_zalloc_~p~1.offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1.base=5019, ldv_zalloc_~tmp~1.offset=0, old(~ldv_count_2~0)=0, ~#__key~0.base=52, ~#__key~0.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~dev.base=18446744073709551615, ~dev.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2.base=12376, ~pdata~2.offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1423] ldv_kzalloc_9_#t~ret140.base, ldv_kzalloc_9_#t~ret140.offset := ldv_zalloc_#res.base, ldv_zalloc_#res.offset; [L1423] ldv_kzalloc_9_~tmp~19.base, ldv_kzalloc_9_~tmp~19.offset := ldv_kzalloc_9_#t~ret140.base, ldv_kzalloc_9_#t~ret140.offset; [L1423] havoc ldv_kzalloc_9_#t~ret140.base, ldv_kzalloc_9_#t~ret140.offset; [L1424] ldv_kzalloc_9_#res.base, ldv_kzalloc_9_#res.offset := ldv_kzalloc_9_~tmp~19.base, ldv_kzalloc_9_~tmp~19.offset; [L1086] #t~ret86.base, #t~ret86.offset := ldv_kzalloc_9_#res.base, ldv_kzalloc_9_#res.offset; [L1086] ~tmp~10.base, ~tmp~10.offset := #t~ret86.base, #t~ret86.offset; [L1086] havoc #t~ret86.base, #t~ret86.offset; [L1087] ~hwmon~1.base, ~hwmon~1.offset := ~tmp~10.base, ~tmp~10.offset; VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res.base=5019, ldv_kzalloc_9_#res.offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19.base=5019, ldv_kzalloc_9_~tmp~19.offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res.base=5019, ldv_zalloc_#res.offset=0, ldv_zalloc_#t~malloc32.base=5019, ldv_zalloc_#t~malloc32.offset=0, ldv_zalloc_~p~1.base=5019, ldv_zalloc_~p~1.offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1.base=5019, ldv_zalloc_~tmp~1.offset=0, old(~ldv_count_2~0)=0, ~#__key~0.base=52, ~#__key~0.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~dev.base=18446744073709551615, ~dev.offset=0, ~hwmon~1.base=5019, ~hwmon~1.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2.base=12376, ~pdata~2.offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0, ~tmp~10.base=5019, ~tmp~10.offset=0] [L1088-L1093] assume !(0 == (~hwmon~1.base + ~hwmon~1.offset) % 18446744073709551616); [L1094] platform_set_drvdata_#in~pdev.base, platform_set_drvdata_#in~pdev.offset, platform_set_drvdata_#in~data.base, platform_set_drvdata_#in~data.offset := ~dev.base, ~dev.offset, ~hwmon~1.base, ~hwmon~1.offset; [L1094] havoc platform_set_drvdata_~pdev.base, platform_set_drvdata_~pdev.offset, platform_set_drvdata_~data.base, platform_set_drvdata_~data.offset; [L909-L917] platform_set_drvdata_~pdev.base, platform_set_drvdata_~pdev.offset := platform_set_drvdata_#in~pdev.base, platform_set_drvdata_#in~pdev.offset; [L909-L917] platform_set_drvdata_~data.base, platform_set_drvdata_~data.offset := platform_set_drvdata_#in~data.base, platform_set_drvdata_#in~data.offset; [L914] call dev_set_drvdata(platform_set_drvdata_~pdev.base, 12 + platform_set_drvdata_~pdev.offset, platform_set_drvdata_~data.base, platform_set_drvdata_~data.offset); [L1095] call __mutex_init(~hwmon~1.base, ~hwmon~1.offset, #t~string89.base, #t~string89.offset, ~#__key~0.base, ~#__key~0.offset); [L1096-L1098] call #t~ret90.base, #t~ret90.offset := s3c_adc_register(~dev.base, ~dev.offset, 0, 0, 0, 0, 0); [L1096-L1098] call write~$Pointer$(#t~ret90.base, #t~ret90.offset, ~hwmon~1.base, 152 + ~hwmon~1.offset, 8); [L1096-L1098] havoc #t~ret90.base, #t~ret90.offset; [L1099] call #t~mem91.base, #t~mem91.offset := read~$Pointer$(~hwmon~1.base, 152 + ~hwmon~1.offset, 8); VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem91.base=18446744073709551616, #t~mem91.offset=-18446744073709551616, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res.base=5019, ldv_kzalloc_9_#res.offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19.base=5019, ldv_kzalloc_9_~tmp~19.offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res.base=5019, ldv_zalloc_#res.offset=0, ldv_zalloc_#t~malloc32.base=5019, ldv_zalloc_#t~malloc32.offset=0, ldv_zalloc_~p~1.base=5019, ldv_zalloc_~p~1.offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1.base=5019, ldv_zalloc_~tmp~1.offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data.base=5019, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=18446744073709551615, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=5019, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=18446744073709551615, platform_set_drvdata_~pdev.offset=0, ~#__key~0.base=52, ~#__key~0.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~dev.base=18446744073709551615, ~dev.offset=0, ~hwmon~1.base=5019, ~hwmon~1.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2.base=12376, ~pdata~2.offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0, ~tmp~10.base=5019, ~tmp~10.offset=0] [L1099] CALL call #t~ret92 := IS_ERR(#t~mem91.base, #t~mem91.offset); VAL [#in~ptr.base=18446744073709551616, #in~ptr.offset=-18446744073709551616, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1391-L1399] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L1393] havoc ~tmp~16; VAL [#in~ptr.base=18446744073709551616, #in~ptr.offset=-18446744073709551616, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ptr.base=18446744073709551616, ~ptr.offset=-18446744073709551616, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1396] CALL call #t~ret137 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=18446744073709551616, #in~ptr.offset=-18446744073709551616, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1452-L1459] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L1457] #res := (if 0 == (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0) then 0 else 1); [L769] ensures true; VAL [#in~ptr.base=18446744073709551616, #in~ptr.offset=-18446744073709551616, #NULL.base=0, #NULL.offset=0, #res=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ptr.base=18446744073709551616, ~ptr.offset=-18446744073709551616, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1396] RET call #t~ret137 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=18446744073709551616, #in~ptr.offset=-18446744073709551616, #NULL.base=0, #NULL.offset=0, #t~ret137=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ptr.base=18446744073709551616, ~ptr.offset=-18446744073709551616, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1396] ~tmp~16 := #t~ret137; [L1396] havoc #t~ret137; [L1397] #res := ~tmp~16 % 256; [L897] ensures true; VAL [#in~ptr.base=18446744073709551616, #in~ptr.offset=-18446744073709551616, #NULL.base=0, #NULL.offset=0, #res=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ptr.base=18446744073709551616, ~ptr.offset=-18446744073709551616, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0, ~tmp~16=0] [L1099] RET call #t~ret92 := IS_ERR(#t~mem91.base, #t~mem91.offset); VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem91.base=18446744073709551616, #t~mem91.offset=-18446744073709551616, #t~ret92=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res.base=5019, ldv_kzalloc_9_#res.offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19.base=5019, ldv_kzalloc_9_~tmp~19.offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res.base=5019, ldv_zalloc_#res.offset=0, ldv_zalloc_#t~malloc32.base=5019, ldv_zalloc_#t~malloc32.offset=0, ldv_zalloc_~p~1.base=5019, ldv_zalloc_~p~1.offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1.base=5019, ldv_zalloc_~tmp~1.offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data.base=5019, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=18446744073709551615, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=5019, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=18446744073709551615, platform_set_drvdata_~pdev.offset=0, ~#__key~0.base=52, ~#__key~0.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~dev.base=18446744073709551615, ~dev.offset=0, ~hwmon~1.base=5019, ~hwmon~1.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2.base=12376, ~pdata~2.offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0, ~tmp~10.base=5019, ~tmp~10.offset=0] [L1099] assume -9223372036854775808 <= #t~ret92 && #t~ret92 <= 9223372036854775807; [L1099] ~tmp___1~0 := #t~ret92; [L1099] havoc #t~ret92; [L1099] havoc #t~mem91.base, #t~mem91.offset; VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res.base=5019, ldv_kzalloc_9_#res.offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19.base=5019, ldv_kzalloc_9_~tmp~19.offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res.base=5019, ldv_zalloc_#res.offset=0, ldv_zalloc_#t~malloc32.base=5019, ldv_zalloc_#t~malloc32.offset=0, ldv_zalloc_~p~1.base=5019, ldv_zalloc_~p~1.offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1.base=5019, ldv_zalloc_~tmp~1.offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data.base=5019, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=18446744073709551615, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=5019, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=18446744073709551615, platform_set_drvdata_~pdev.offset=0, ~#__key~0.base=52, ~#__key~0.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~dev.base=18446744073709551615, ~dev.offset=0, ~hwmon~1.base=5019, ~hwmon~1.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2.base=12376, ~pdata~2.offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0, ~tmp___1~0=0, ~tmp~10.base=5019, ~tmp~10.offset=0] [L1100-L1107] assume !(0 != ~tmp___1~0); [L1108] s3c_hwmon_add_raw_#in~dev.base, s3c_hwmon_add_raw_#in~dev.offset := ~dev.base, 12 + ~dev.offset; [L1108] havoc s3c_hwmon_add_raw_#res; [L1108] havoc s3c_hwmon_add_raw_~dev.base, s3c_hwmon_add_raw_~dev.offset; [L944-L951] s3c_hwmon_add_raw_~dev.base, s3c_hwmon_add_raw_~dev.offset := s3c_hwmon_add_raw_#in~dev.base, s3c_hwmon_add_raw_#in~dev.offset; [L949] s3c_hwmon_add_raw_#res := 0; [L1108] #t~ret97 := s3c_hwmon_add_raw_#res; [L1108] assume -2147483648 <= #t~ret97 && #t~ret97 <= 2147483647; [L1108] ~ret~3 := #t~ret97; [L1108] havoc #t~ret97; VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res.base=5019, ldv_kzalloc_9_#res.offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19.base=5019, ldv_kzalloc_9_~tmp~19.offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res.base=5019, ldv_zalloc_#res.offset=0, ldv_zalloc_#t~malloc32.base=5019, ldv_zalloc_#t~malloc32.offset=0, ldv_zalloc_~p~1.base=5019, ldv_zalloc_~p~1.offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1.base=5019, ldv_zalloc_~tmp~1.offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data.base=5019, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=18446744073709551615, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=5019, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=18446744073709551615, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_add_raw_#in~dev.base=18446744073709551615, s3c_hwmon_add_raw_#in~dev.offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev.base=18446744073709551615, s3c_hwmon_add_raw_~dev.offset=12, ~#__key~0.base=52, ~#__key~0.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~dev.base=18446744073709551615, ~dev.offset=0, ~hwmon~1.base=5019, ~hwmon~1.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2.base=12376, ~pdata~2.offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0, ~tmp___1~0=0, ~tmp~10.base=5019, ~tmp~10.offset=0] [L1109-L1113] assume !(0 != ~ret~3); [L1114] call #t~ret98.base, #t~ret98.offset := hwmon_device_register(~dev.base, 12 + ~dev.offset); [L1114] call write~$Pointer$(#t~ret98.base, #t~ret98.offset, ~hwmon~1.base, 160 + ~hwmon~1.offset, 8); [L1114] havoc #t~ret98.base, #t~ret98.offset; [L1115] call #t~mem99.base, #t~mem99.offset := read~$Pointer$(~hwmon~1.base, 160 + ~hwmon~1.offset, 8); VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem99.base=9223372036854775808, #t~mem99.offset=27670116110564327424, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res.base=5019, ldv_kzalloc_9_#res.offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19.base=5019, ldv_kzalloc_9_~tmp~19.offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res.base=5019, ldv_zalloc_#res.offset=0, ldv_zalloc_#t~malloc32.base=5019, ldv_zalloc_#t~malloc32.offset=0, ldv_zalloc_~p~1.base=5019, ldv_zalloc_~p~1.offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1.base=5019, ldv_zalloc_~tmp~1.offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data.base=5019, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=18446744073709551615, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=5019, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=18446744073709551615, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_add_raw_#in~dev.base=18446744073709551615, s3c_hwmon_add_raw_#in~dev.offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev.base=18446744073709551615, s3c_hwmon_add_raw_~dev.offset=12, ~#__key~0.base=52, ~#__key~0.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~dev.base=18446744073709551615, ~dev.offset=0, ~hwmon~1.base=5019, ~hwmon~1.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2.base=12376, ~pdata~2.offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0, ~tmp___1~0=0, ~tmp~10.base=5019, ~tmp~10.offset=0] [L1115] CALL call #t~ret100 := IS_ERR(#t~mem99.base, #t~mem99.offset); VAL [#in~ptr.base=9223372036854775808, #in~ptr.offset=27670116110564327424, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1391-L1399] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L1393] havoc ~tmp~16; VAL [#in~ptr.base=9223372036854775808, #in~ptr.offset=27670116110564327424, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ptr.base=9223372036854775808, ~ptr.offset=27670116110564327424, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1396] CALL call #t~ret137 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=9223372036854775808, #in~ptr.offset=27670116110564327424, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1452-L1459] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L1457] #res := (if 0 == (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0) then 0 else 1); [L769] ensures true; VAL [#in~ptr.base=9223372036854775808, #in~ptr.offset=27670116110564327424, #NULL.base=0, #NULL.offset=0, #res=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ptr.base=9223372036854775808, ~ptr.offset=27670116110564327424, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1396] RET call #t~ret137 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=9223372036854775808, #in~ptr.offset=27670116110564327424, #NULL.base=0, #NULL.offset=0, #t~ret137=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ptr.base=9223372036854775808, ~ptr.offset=27670116110564327424, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1396] ~tmp~16 := #t~ret137; [L1396] havoc #t~ret137; [L1397] #res := ~tmp~16 % 256; [L897] ensures true; VAL [#in~ptr.base=9223372036854775808, #in~ptr.offset=27670116110564327424, #NULL.base=0, #NULL.offset=0, #res=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ptr.base=9223372036854775808, ~ptr.offset=27670116110564327424, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0, ~tmp~16=0] [L1115] RET call #t~ret100 := IS_ERR(#t~mem99.base, #t~mem99.offset); VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem99.base=9223372036854775808, #t~mem99.offset=27670116110564327424, #t~ret100=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res.base=5019, ldv_kzalloc_9_#res.offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19.base=5019, ldv_kzalloc_9_~tmp~19.offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res.base=5019, ldv_zalloc_#res.offset=0, ldv_zalloc_#t~malloc32.base=5019, ldv_zalloc_#t~malloc32.offset=0, ldv_zalloc_~p~1.base=5019, ldv_zalloc_~p~1.offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1.base=5019, ldv_zalloc_~tmp~1.offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data.base=5019, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=18446744073709551615, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=5019, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=18446744073709551615, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_add_raw_#in~dev.base=18446744073709551615, s3c_hwmon_add_raw_#in~dev.offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev.base=18446744073709551615, s3c_hwmon_add_raw_~dev.offset=12, ~#__key~0.base=52, ~#__key~0.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~dev.base=18446744073709551615, ~dev.offset=0, ~hwmon~1.base=5019, ~hwmon~1.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2.base=12376, ~pdata~2.offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0, ~tmp___1~0=0, ~tmp~10.base=5019, ~tmp~10.offset=0] [L1115] assume -9223372036854775808 <= #t~ret100 && #t~ret100 <= 9223372036854775807; [L1115] ~tmp___3~0 := #t~ret100; [L1115] havoc #t~mem99.base, #t~mem99.offset; [L1115] havoc #t~ret100; VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res.base=5019, ldv_kzalloc_9_#res.offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19.base=5019, ldv_kzalloc_9_~tmp~19.offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res.base=5019, ldv_zalloc_#res.offset=0, ldv_zalloc_#t~malloc32.base=5019, ldv_zalloc_#t~malloc32.offset=0, ldv_zalloc_~p~1.base=5019, ldv_zalloc_~p~1.offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1.base=5019, ldv_zalloc_~tmp~1.offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data.base=5019, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=18446744073709551615, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=5019, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=18446744073709551615, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_add_raw_#in~dev.base=18446744073709551615, s3c_hwmon_add_raw_#in~dev.offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev.base=18446744073709551615, s3c_hwmon_add_raw_~dev.offset=12, ~#__key~0.base=52, ~#__key~0.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~dev.base=18446744073709551615, ~dev.offset=0, ~hwmon~1.base=5019, ~hwmon~1.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2.base=12376, ~pdata~2.offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0, ~tmp___1~0=0, ~tmp___3~0=0, ~tmp~10.base=5019, ~tmp~10.offset=0] [L1116-L1123] assume !(0 != ~tmp___3~0); [L1124] ~i~0 := 0; VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res.base=5019, ldv_kzalloc_9_#res.offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19.base=5019, ldv_kzalloc_9_~tmp~19.offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res.base=5019, ldv_zalloc_#res.offset=0, ldv_zalloc_#t~malloc32.base=5019, ldv_zalloc_#t~malloc32.offset=0, ldv_zalloc_~p~1.base=5019, ldv_zalloc_~p~1.offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1.base=5019, ldv_zalloc_~tmp~1.offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data.base=5019, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=18446744073709551615, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=5019, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=18446744073709551615, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_add_raw_#in~dev.base=18446744073709551615, s3c_hwmon_add_raw_#in~dev.offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev.base=18446744073709551615, s3c_hwmon_add_raw_~dev.offset=12, ~#__key~0.base=52, ~#__key~0.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~dev.base=18446744073709551615, ~dev.offset=0, ~hwmon~1.base=5019, ~hwmon~1.offset=0, ~i~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2.base=12376, ~pdata~2.offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0, ~tmp___1~0=0, ~tmp___3~0=0, ~tmp~10.base=5019, ~tmp~10.offset=0] [L1169-L1173] assume ~i~0 % 4294967296 <= 7; [L1127] call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~pdata~2.base, ~pdata~2.offset + 8 * ~i~0, 8); [L1127] ~cfg~2.base, ~cfg~2.offset := #t~mem105.base, #t~mem105.offset; [L1127] havoc #t~mem105.base, #t~mem105.offset; VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res.base=5019, ldv_kzalloc_9_#res.offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19.base=5019, ldv_kzalloc_9_~tmp~19.offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res.base=5019, ldv_zalloc_#res.offset=0, ldv_zalloc_#t~malloc32.base=5019, ldv_zalloc_#t~malloc32.offset=0, ldv_zalloc_~p~1.base=5019, ldv_zalloc_~p~1.offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1.base=5019, ldv_zalloc_~tmp~1.offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data.base=5019, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=18446744073709551615, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=5019, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=18446744073709551615, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_add_raw_#in~dev.base=18446744073709551615, s3c_hwmon_add_raw_#in~dev.offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev.base=18446744073709551615, s3c_hwmon_add_raw_~dev.offset=12, ~#__key~0.base=52, ~#__key~0.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~cfg~2.base=18446744073709548820, ~cfg~2.offset=148, ~dev.base=18446744073709551615, ~dev.offset=0, ~hwmon~1.base=5019, ~hwmon~1.offset=0, ~i~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2.base=12376, ~pdata~2.offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0, ~tmp___1~0=0, ~tmp___3~0=0, ~tmp~10.base=5019, ~tmp~10.offset=0] [L1128-L1132] assume !(0 == (~cfg~2.base + ~cfg~2.offset) % 18446744073709551616); [L1133] call #t~mem106 := read~int(~cfg~2.base, 8 + ~cfg~2.offset, 4); [L1133-L1138] assume !(#t~mem106 % 4294967296 > 65535); [L1133] havoc #t~mem106; [L1139] call #t~mem109 := read~int(~cfg~2.base, 12 + ~cfg~2.offset, 4); VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem109=25778393710593, #t~nondet107=68, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res.base=5019, ldv_kzalloc_9_#res.offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19.base=5019, ldv_kzalloc_9_~tmp~19.offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res.base=5019, ldv_zalloc_#res.offset=0, ldv_zalloc_#t~malloc32.base=5019, ldv_zalloc_#t~malloc32.offset=0, ldv_zalloc_~p~1.base=5019, ldv_zalloc_~p~1.offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1.base=5019, ldv_zalloc_~tmp~1.offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data.base=5019, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=18446744073709551615, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=5019, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=18446744073709551615, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_add_raw_#in~dev.base=18446744073709551615, s3c_hwmon_add_raw_#in~dev.offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev.base=18446744073709551615, s3c_hwmon_add_raw_~dev.offset=12, ~#__key~0.base=52, ~#__key~0.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~cfg~2.base=18446744073709548820, ~cfg~2.offset=148, ~dev.base=18446744073709551615, ~dev.offset=0, ~hwmon~1.base=5019, ~hwmon~1.offset=0, ~i~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2.base=12376, ~pdata~2.offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0, ~tmp___1~0=0, ~tmp___3~0=0, ~tmp~10.base=5019, ~tmp~10.offset=0] [L1139-L1144] assume !(0 == #t~mem109 % 4294967296); [L1139] havoc #t~mem109; [L1145] call #t~mem112.base, #t~mem112.offset := read~$Pointer$(~pdata~2.base, ~pdata~2.offset + 8 * ~i~0, 8); [L1145-L1146] s3c_hwmon_create_attr_#in~dev.base, s3c_hwmon_create_attr_#in~dev.offset, s3c_hwmon_create_attr_#in~cfg.base, s3c_hwmon_create_attr_#in~cfg.offset, s3c_hwmon_create_attr_#in~attrs.base, s3c_hwmon_create_attr_#in~attrs.offset, s3c_hwmon_create_attr_#in~channel := ~dev.base, 12 + ~dev.offset, #t~mem112.base, #t~mem112.offset, ~hwmon~1.base, 168 + ~hwmon~1.offset + 116 * (~i~0 % 4294967296), ~i~0; [L1145-L1146] havoc s3c_hwmon_create_attr_#res; [L1145-L1146] havoc s3c_hwmon_create_attr_#t~nondet72, s3c_hwmon_create_attr_#t~ret74, s3c_hwmon_create_attr_#t~nondet75, s3c_hwmon_create_attr_#t~mem77.base, s3c_hwmon_create_attr_#t~mem77.offset, s3c_hwmon_create_attr_#t~nondet78, s3c_hwmon_create_attr_#t~ret80, s3c_hwmon_create_attr_#t~nondet81, s3c_hwmon_create_attr_~dev.base, s3c_hwmon_create_attr_~dev.offset, s3c_hwmon_create_attr_~cfg.base, s3c_hwmon_create_attr_~cfg.offset, s3c_hwmon_create_attr_~attrs.base, s3c_hwmon_create_attr_~attrs.offset, s3c_hwmon_create_attr_~channel, s3c_hwmon_create_attr_~attr~0.base, s3c_hwmon_create_attr_~attr~0.offset, s3c_hwmon_create_attr_~ret~2; [L1013-L1052] s3c_hwmon_create_attr_~dev.base, s3c_hwmon_create_attr_~dev.offset := s3c_hwmon_create_attr_#in~dev.base, s3c_hwmon_create_attr_#in~dev.offset; [L1013-L1052] s3c_hwmon_create_attr_~cfg.base, s3c_hwmon_create_attr_~cfg.offset := s3c_hwmon_create_attr_#in~cfg.base, s3c_hwmon_create_attr_#in~cfg.offset; [L1013-L1052] s3c_hwmon_create_attr_~attrs.base, s3c_hwmon_create_attr_~attrs.offset := s3c_hwmon_create_attr_#in~attrs.base, s3c_hwmon_create_attr_#in~attrs.offset; [L1013-L1052] s3c_hwmon_create_attr_~channel := s3c_hwmon_create_attr_#in~channel; [L1016] havoc s3c_hwmon_create_attr_~attr~0.base, s3c_hwmon_create_attr_~attr~0.offset; [L1017] havoc s3c_hwmon_create_attr_~ret~2; [L1020] havoc s3c_hwmon_create_attr_#t~nondet72; [L1021] s3c_hwmon_create_attr_~attr~0.base, s3c_hwmon_create_attr_~attr~0.offset := s3c_hwmon_create_attr_~attrs.base, s3c_hwmon_create_attr_~attrs.offset; [L1022] call write~int(s3c_hwmon_create_attr_~channel, s3c_hwmon_create_attr_~attr~0.base, 42 + s3c_hwmon_create_attr_~attr~0.offset, 4); [L1023] call write~$Pointer$(s3c_hwmon_create_attr_~attrs.base, 92 + s3c_hwmon_create_attr_~attrs.offset, s3c_hwmon_create_attr_~attr~0.base, s3c_hwmon_create_attr_~attr~0.offset, 8); [L1024] call write~int(292, s3c_hwmon_create_attr_~attr~0.base, 8 + s3c_hwmon_create_attr_~attr~0.offset, 2); [L1025] call write~$Pointer$(#funAddr~s3c_hwmon_ch_show.base, #funAddr~s3c_hwmon_ch_show.offset, s3c_hwmon_create_attr_~attr~0.base, 26 + s3c_hwmon_create_attr_~attr~0.offset, 8); [L1026] ldv_device_create_file_7_#in~ldv_func_arg1.base, ldv_device_create_file_7_#in~ldv_func_arg1.offset, ldv_device_create_file_7_#in~ldv_func_arg2.base, ldv_device_create_file_7_#in~ldv_func_arg2.offset := s3c_hwmon_create_attr_~dev.base, s3c_hwmon_create_attr_~dev.offset, s3c_hwmon_create_attr_~attr~0.base, s3c_hwmon_create_attr_~attr~0.offset; [L1026] havoc ldv_device_create_file_7_#res; [L1026] havoc ldv_device_create_file_7_#t~ret138, ldv_device_create_file_7_~ldv_func_arg1.base, ldv_device_create_file_7_~ldv_func_arg1.offset, ldv_device_create_file_7_~ldv_func_arg2.base, ldv_device_create_file_7_~ldv_func_arg2.offset, ldv_device_create_file_7_~tmp~17; [L1400-L1408] ldv_device_create_file_7_~ldv_func_arg1.base, ldv_device_create_file_7_~ldv_func_arg1.offset := ldv_device_create_file_7_#in~ldv_func_arg1.base, ldv_device_create_file_7_#in~ldv_func_arg1.offset; [L1400-L1408] ldv_device_create_file_7_~ldv_func_arg2.base, ldv_device_create_file_7_~ldv_func_arg2.offset := ldv_device_create_file_7_#in~ldv_func_arg2.base, ldv_device_create_file_7_#in~ldv_func_arg2.offset; [L1402] havoc ldv_device_create_file_7_~tmp~17; VAL [#in~dev.base=18446744073709551615, #in~dev.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem112.base=18446744073709548820, #t~mem112.offset=148, #t~nondet107=68, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, ldv_device_create_file_7_#in~ldv_func_arg1.base=18446744073709551615, ldv_device_create_file_7_#in~ldv_func_arg1.offset=12, ldv_device_create_file_7_#in~ldv_func_arg2.base=5019, ldv_device_create_file_7_#in~ldv_func_arg2.offset=168, ldv_device_create_file_7_~ldv_func_arg1.base=18446744073709551615, ldv_device_create_file_7_~ldv_func_arg1.offset=12, ldv_device_create_file_7_~ldv_func_arg2.base=5019, ldv_device_create_file_7_~ldv_func_arg2.offset=168, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res.base=5019, ldv_kzalloc_9_#res.offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19.base=5019, ldv_kzalloc_9_~tmp~19.offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res.base=5019, ldv_zalloc_#res.offset=0, ldv_zalloc_#t~malloc32.base=5019, ldv_zalloc_#t~malloc32.offset=0, ldv_zalloc_~p~1.base=5019, ldv_zalloc_~p~1.offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1.base=5019, ldv_zalloc_~tmp~1.offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data.base=5019, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=18446744073709551615, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=5019, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=18446744073709551615, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_add_raw_#in~dev.base=18446744073709551615, s3c_hwmon_add_raw_#in~dev.offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev.base=18446744073709551615, s3c_hwmon_add_raw_~dev.offset=12, s3c_hwmon_create_attr_#in~attrs.base=5019, s3c_hwmon_create_attr_#in~attrs.offset=168, s3c_hwmon_create_attr_#in~cfg.base=18446744073709548820, s3c_hwmon_create_attr_#in~cfg.offset=148, s3c_hwmon_create_attr_#in~channel=0, s3c_hwmon_create_attr_#in~dev.base=18446744073709551615, s3c_hwmon_create_attr_#in~dev.offset=12, s3c_hwmon_create_attr_~attrs.base=5019, s3c_hwmon_create_attr_~attrs.offset=168, s3c_hwmon_create_attr_~attr~0.base=5019, s3c_hwmon_create_attr_~attr~0.offset=168, s3c_hwmon_create_attr_~cfg.base=18446744073709548820, s3c_hwmon_create_attr_~cfg.offset=148, s3c_hwmon_create_attr_~channel=0, s3c_hwmon_create_attr_~dev.base=18446744073709551615, s3c_hwmon_create_attr_~dev.offset=12, ~#__key~0.base=52, ~#__key~0.offset=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~cfg~2.base=18446744073709548820, ~cfg~2.offset=148, ~dev.base=18446744073709551615, ~dev.offset=0, ~hwmon~1.base=5019, ~hwmon~1.offset=0, ~i~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2.base=12376, ~pdata~2.offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0, ~tmp___1~0=0, ~tmp___3~0=0, ~tmp~10.base=5019, ~tmp~10.offset=0] [L1405] CALL call ldv_device_create_file_7_#t~ret138 := ldv_device_create_file(); VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1508] havoc ~nondetermined~0; [L1509] havoc ~tmp~22; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1512] CALL call #t~ret143 := ldv_undef_int(); VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L854] havoc ~tmp~4; [L857] assume -2147483648 <= #t~nondet35 && #t~nondet35 <= 2147483647; [L857] ~tmp~4 := #t~nondet35; [L857] havoc #t~nondet35; [L858] #res := ~tmp~4; [L852-L860] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #res=-1, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0, ~tmp~4=-1] [L1512] RET call #t~ret143 := ldv_undef_int(); VAL [#NULL.base=0, #NULL.offset=0, #t~ret143=-1, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1512] assume -2147483648 <= #t~ret143 && #t~ret143 <= 2147483647; [L1512] ~nondetermined~0 := #t~ret143; [L1512] havoc #t~ret143; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~nondetermined~0=-1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1513-L1524] assume 0 != ~nondetermined~0; [L1514] ~ldv_count_2~0 := 1 + ~ldv_count_2~0; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~nondetermined~0=-1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1515-L1519] assume ~ldv_count_1~0 < ~ldv_count_2~0; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~nondetermined~0=-1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [L1433] assert false; VAL [#NULL.base=0, #NULL.offset=0, #t~string102.base=43, #t~string102.offset=0, #t~string108.base=41, #t~string108.offset=0, #t~string111.base=38, #t~string111.offset=0, #t~string115.base=39, #t~string115.offset=0, #t~string121.base=47, #t~string121.offset=0, #t~string52.base=29, #t~string52.offset=0, #t~string53.base=28, #t~string53.offset=0, #t~string65.base=9, #t~string65.offset=0, #t~string70.base=23, #t~string70.offset=0, #t~string73.base=22, #t~string73.offset=0, #t~string76.base=19, #t~string76.offset=0, #t~string79.base=18, #t~string79.offset=0, #t~string82.base=15, #t~string82.offset=0, #t~string85.base=17, #t~string85.offset=0, #t~string88.base=35, #t~string88.offset=0, #t~string89.base=36, #t~string89.offset=0, #t~string94.base=44, #t~string94.offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=7, ~#__this_module~0.offset=50, ~#s3c_hwmon_driver~0.base=5, ~#s3c_hwmon_driver~0.offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~nondetermined~0=-1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0.base=18446744073709551615, ~s3c_hwmon_driver_group1~0.offset=0] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L938] FCALL call #t~string52 := #Ultimate.alloc(4); [L938] FCALL call write~init~int(60, { base: #t~string52!base, offset: #t~string52!offset }, 1); [L938] FCALL call write~init~int(55, { base: #t~string52!base, offset: 1 + #t~string52!offset }, 1); [L938] FCALL call write~init~int(62, { base: #t~string52!base, offset: 2 + #t~string52!offset }, 1); [L938] FCALL call write~init~int(0, { base: #t~string52!base, offset: 3 + #t~string52!offset }, 1); [L938] FCALL call #t~string53 := #Ultimate.alloc(20); [L991] FCALL call #t~string65 := #Ultimate.alloc(4); [L991] FCALL call write~init~int(37, { base: #t~string65!base, offset: #t~string65!offset }, 1); [L991] FCALL call write~init~int(100, { base: #t~string65!base, offset: 1 + #t~string65!offset }, 1); [L991] FCALL call write~init~int(10, { base: #t~string65!base, offset: 2 + #t~string65!offset }, 1); [L991] FCALL call write~init~int(0, { base: #t~string65!base, offset: 3 + #t~string65!offset }, 1); [L1009] FCALL call #t~string70 := #Ultimate.alloc(4); [L1009] FCALL call write~init~int(37, { base: #t~string70!base, offset: #t~string70!offset }, 1); [L1009] FCALL call write~init~int(115, { base: #t~string70!base, offset: 1 + #t~string70!offset }, 1); [L1009] FCALL call write~init~int(10, { base: #t~string70!base, offset: 2 + #t~string70!offset }, 1); [L1009] FCALL call write~init~int(0, { base: #t~string70!base, offset: 3 + #t~string70!offset }, 1); [L1020] FCALL call #t~string73 := #Ultimate.alloc(11); [L1028] FCALL call #t~string76 := #Ultimate.alloc(34); [L1034] FCALL call #t~string79 := #Ultimate.alloc(11); [L1043] FCALL call #t~string82 := #Ultimate.alloc(34); [L1081] FCALL call #t~string85 := #Ultimate.alloc(27); [L1089] FCALL call #t~string88 := #Ultimate.alloc(11); [L1095] FCALL call #t~string89 := #Ultimate.alloc(13); [L1101] FCALL call #t~string94 := #Ultimate.alloc(21); [L1117] FCALL call #t~string102 := #Ultimate.alloc(30); [L1134] FCALL call #t~string108 := #Ultimate.alloc(33); [L1140] FCALL call #t~string111 := #Ultimate.alloc(25); [L1148] FCALL call #t~string115 := #Ultimate.alloc(27); [L1213] FCALL call #t~string121 := #Ultimate.alloc(10); [L888] ~LDV_IN_INTERRUPT~0 := 1; [L889] ~ref_cnt~0 := 0; [L890] ~ldv_state_variable_1~0 := 0; [L892] ~probed_1~0 := 0; [L893] ~ldv_state_variable_0~0 := 0; [L1234] ~ldv_retval_0~0 := 0; [L1235] ~ldv_retval_1~0 := 0; [L1238] ~ldv_retval_2~0 := 0; [L1495] ~ldv_count_1~0 := 0; [L1496] ~ldv_count_2~0 := 0; [L891] ~s3c_hwmon_driver_group1~0 := { base: 0, offset: 0 }; [L1213-L1215] FCALL call ~#s3c_hwmon_driver~0 := #Ultimate.alloc(153); [L1213-L1215] FCALL call write~init~$Pointer$(#funAddr~s3c_hwmon_probe, { base: ~#s3c_hwmon_driver~0!base, offset: ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$(#funAddr~s3c_hwmon_remove, { base: ~#s3c_hwmon_driver~0!base, offset: 8 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 16 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 24 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 32 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$(#t~string121, { base: ~#s3c_hwmon_driver~0!base, offset: 40 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 48 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#s3c_hwmon_driver~0!base, offset: 56 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 64 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~int(0, { base: ~#s3c_hwmon_driver~0!base, offset: 72 + ~#s3c_hwmon_driver~0!offset }, 1); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 73 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 81 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 89 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 97 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 105 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 113 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 121 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 129 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 137 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 145 + ~#s3c_hwmon_driver~0!offset }, 8); [?] havoc main_#res; [?] havoc main_#t~nondet126, main_#t~switch127, main_#t~nondet128, main_#t~switch129, main_#t~ret130, main_#t~ret131, main_#t~ret132, main_#t~nondet133, main_#t~switch134, main_#t~ret135, main_~tmp~14, main_~tmp___0~4, main_~tmp___1~1; [L1267] havoc main_~tmp~14; [L1268] havoc main_~tmp___0~4; [L1269] havoc main_~tmp___1~1; [L1273] ~ldv_state_variable_1~0 := 0; [L1274] ~ref_cnt~0 := 0; [L1275] ~ldv_state_variable_0~0 := 1; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=0, ~s3c_hwmon_driver_group1~0!offset=0] [L1277] assume -2147483648 <= main_#t~nondet126 && main_#t~nondet126 <= 2147483647; [L1277] main_~tmp~14 := main_#t~nondet126; [L1277] havoc main_#t~nondet126; [L1279] main_#t~switch127 := 0 == main_~tmp~14; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, main_#t~switch127=false, main_~tmp~14=1, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=0, ~s3c_hwmon_driver_group1~0!offset=0] [L1278-L1374] COND FALSE !(main_#t~switch127) [L1331] main_#t~switch127 := main_#t~switch127 || 1 == main_~tmp~14; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, main_#t~switch127=true, main_~tmp~14=1, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=0, ~s3c_hwmon_driver_group1~0!offset=0] [L1278-L1374] COND TRUE main_#t~switch127 VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, main_#t~switch127=true, main_~tmp~14=1, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=0, ~s3c_hwmon_driver_group1~0!offset=0] [L1332] COND TRUE 0 != ~ldv_state_variable_0~0 [L1333] assume -2147483648 <= main_#t~nondet133 && main_#t~nondet133 <= 2147483647; [L1333] main_~tmp___1~1 := main_#t~nondet133; [L1333] havoc main_#t~nondet133; [L1335] main_#t~switch134 := 0 == main_~tmp___1~1; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, main_#t~switch127=true, main_#t~switch134=false, main_~tmp___1~1=1, main_~tmp~14=1, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=0, ~s3c_hwmon_driver_group1~0!offset=0] [L1334-L1366] COND FALSE !(main_#t~switch134) [L1344] main_#t~switch134 := main_#t~switch134 || 1 == main_~tmp___1~1; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, main_#t~switch127=true, main_#t~switch134=true, main_~tmp___1~1=1, main_~tmp~14=1, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=0, ~s3c_hwmon_driver_group1~0!offset=0] [L1334-L1366] COND TRUE main_#t~switch134 VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, main_#t~switch127=true, main_#t~switch134=true, main_~tmp___1~1=1, main_~tmp~14=1, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=0, ~s3c_hwmon_driver_group1~0!offset=0] [L1345] COND TRUE 1 == ~ldv_state_variable_0~0 [L1346] havoc s3c_hwmon_init_#res; [L1346] havoc s3c_hwmon_init_#t~ret122, s3c_hwmon_init_~tmp~12; [L1218] havoc s3c_hwmon_init_~tmp~12; [L1221] FCALL call s3c_hwmon_init_#t~ret122 := platform_driver_register(~#s3c_hwmon_driver~0); [L1221] assume -2147483648 <= s3c_hwmon_init_#t~ret122 && s3c_hwmon_init_#t~ret122 <= 2147483647; [L1221] s3c_hwmon_init_~tmp~12 := s3c_hwmon_init_#t~ret122; [L1221] havoc s3c_hwmon_init_#t~ret122; [L1222] s3c_hwmon_init_#res := s3c_hwmon_init_~tmp~12; [L1346] main_#t~ret135 := s3c_hwmon_init_#res; [L1346] assume -2147483648 <= main_#t~ret135 && main_#t~ret135 <= 2147483647; [L1346] ~ldv_retval_2~0 := main_#t~ret135; [L1346] havoc main_#t~ret135; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, main_#t~switch127=true, main_#t~switch134=true, main_~tmp___1~1=1, main_~tmp~14=1, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~12=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=0, ~s3c_hwmon_driver_group1~0!offset=0] [L1347] COND FALSE !(0 != ~ldv_retval_2~0) [L1353] COND TRUE 0 == ~ldv_retval_2~0 [L1354] ~ldv_state_variable_0~0 := 2; [L1355] ~ldv_state_variable_1~0 := 1; [L1356] havoc ldv_platform_driver_init_1_#t~ret125, ldv_platform_driver_init_1_~tmp~13; [L1256] havoc ldv_platform_driver_init_1_~tmp~13; [L1259] ldv_malloc_#in~size := 624; [L1259] havoc ldv_malloc_#res; [L1259] havoc ldv_malloc_#t~nondet29, ldv_malloc_#t~malloc30, ldv_malloc_~size, ldv_malloc_~p~0, ldv_malloc_~tmp~0, ldv_malloc_~tmp___0~0; [L795-L812] ldv_malloc_~size := ldv_malloc_#in~size; [L797] havoc ldv_malloc_~p~0; [L798] havoc ldv_malloc_~tmp~0; [L799] havoc ldv_malloc_~tmp___0~0; [L802] assume -2147483648 <= ldv_malloc_#t~nondet29 && ldv_malloc_#t~nondet29 <= 2147483647; [L802] ldv_malloc_~tmp___0~0 := ldv_malloc_#t~nondet29; [L802] havoc ldv_malloc_#t~nondet29; [L803] COND FALSE !(0 != ldv_malloc_~tmp___0~0) [L806] FCALL call ldv_malloc_#t~malloc30 := #Ultimate.alloc(ldv_malloc_~size); [L806] ldv_malloc_~tmp~0 := ldv_malloc_#t~malloc30; [L807] ldv_malloc_~p~0 := ldv_malloc_~tmp~0; [L808] assume 0 != (if 0 != (ldv_malloc_~p~0!base + ldv_malloc_~p~0!offset) % 18446744073709551616 then 1 else 0); [L809] ldv_malloc_#res := ldv_malloc_~p~0; [L1259] ldv_platform_driver_init_1_#t~ret125 := ldv_malloc_#res; [L1259] ldv_platform_driver_init_1_~tmp~13 := ldv_platform_driver_init_1_#t~ret125; [L1259] havoc ldv_platform_driver_init_1_#t~ret125; [L1260] assume 0 != (if 0 != (ldv_platform_driver_init_1_~tmp~13!base + ldv_platform_driver_init_1_~tmp~13!offset) % 18446744073709551616 then 1 else 0); [L1261] ~s3c_hwmon_driver_group1~0 := ldv_platform_driver_init_1_~tmp~13; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_malloc_#in~size=624, ldv_malloc_#res!base=18446744073709551615, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc30!base=18446744073709551615, ldv_malloc_#t~malloc30!offset=0, ldv_malloc_#t~nondet29=0, ldv_malloc_~p~0!base=18446744073709551615, ldv_malloc_~p~0!offset=0, ldv_malloc_~size=624, ldv_malloc_~tmp___0~0=0, ldv_malloc_~tmp~0!base=18446744073709551615, ldv_malloc_~tmp~0!offset=0, ldv_platform_driver_init_1_#t~ret125!base=0, ldv_platform_driver_init_1_#t~ret125!offset=0, ldv_platform_driver_init_1_~tmp~13!base=18446744073709551615, ldv_platform_driver_init_1_~tmp~13!offset=0, main_#t~switch127=true, main_#t~switch134=true, main_~tmp___1~1=1, main_~tmp~14=1, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~12=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1277] assume -2147483648 <= main_#t~nondet126 && main_#t~nondet126 <= 2147483647; [L1277] main_~tmp~14 := main_#t~nondet126; [L1277] havoc main_#t~nondet126; [L1279] main_#t~switch127 := 0 == main_~tmp~14; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_malloc_#in~size=624, ldv_malloc_#res!base=18446744073709551615, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc30!base=18446744073709551615, ldv_malloc_#t~malloc30!offset=0, ldv_malloc_#t~nondet29=0, ldv_malloc_~p~0!base=18446744073709551615, ldv_malloc_~p~0!offset=0, ldv_malloc_~size=624, ldv_malloc_~tmp___0~0=0, ldv_malloc_~tmp~0!base=18446744073709551615, ldv_malloc_~tmp~0!offset=0, ldv_platform_driver_init_1_#t~ret125!base=0, ldv_platform_driver_init_1_#t~ret125!offset=0, ldv_platform_driver_init_1_~tmp~13!base=18446744073709551615, ldv_platform_driver_init_1_~tmp~13!offset=0, main_#t~switch127=true, main_#t~switch134=true, main_~tmp___1~1=1, main_~tmp~14=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~12=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1278-L1374] COND TRUE main_#t~switch127 VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_malloc_#in~size=624, ldv_malloc_#res!base=18446744073709551615, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc30!base=18446744073709551615, ldv_malloc_#t~malloc30!offset=0, ldv_malloc_#t~nondet29=0, ldv_malloc_~p~0!base=18446744073709551615, ldv_malloc_~p~0!offset=0, ldv_malloc_~size=624, ldv_malloc_~tmp___0~0=0, ldv_malloc_~tmp~0!base=18446744073709551615, ldv_malloc_~tmp~0!offset=0, ldv_platform_driver_init_1_#t~ret125!base=0, ldv_platform_driver_init_1_#t~ret125!offset=0, ldv_platform_driver_init_1_~tmp~13!base=18446744073709551615, ldv_platform_driver_init_1_~tmp~13!offset=0, main_#t~switch127=true, main_#t~switch134=true, main_~tmp___1~1=1, main_~tmp~14=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~12=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1280] COND TRUE 0 != ~ldv_state_variable_1~0 [L1281] assume -2147483648 <= main_#t~nondet128 && main_#t~nondet128 <= 2147483647; [L1281] main_~tmp___0~4 := main_#t~nondet128; [L1281] havoc main_#t~nondet128; [L1283] main_#t~switch129 := 0 == main_~tmp___0~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_malloc_#in~size=624, ldv_malloc_#res!base=18446744073709551615, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc30!base=18446744073709551615, ldv_malloc_#t~malloc30!offset=0, ldv_malloc_#t~nondet29=0, ldv_malloc_~p~0!base=18446744073709551615, ldv_malloc_~p~0!offset=0, ldv_malloc_~size=624, ldv_malloc_~tmp___0~0=0, ldv_malloc_~tmp~0!base=18446744073709551615, ldv_malloc_~tmp~0!offset=0, ldv_platform_driver_init_1_#t~ret125!base=0, ldv_platform_driver_init_1_#t~ret125!offset=0, ldv_platform_driver_init_1_~tmp~13!base=18446744073709551615, ldv_platform_driver_init_1_~tmp~13!offset=0, main_#t~switch127=true, main_#t~switch129=true, main_#t~switch134=true, main_~tmp___0~4=0, main_~tmp___1~1=1, main_~tmp~14=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~12=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1282-L1325] COND TRUE main_#t~switch129 VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_malloc_#in~size=624, ldv_malloc_#res!base=18446744073709551615, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc30!base=18446744073709551615, ldv_malloc_#t~malloc30!offset=0, ldv_malloc_#t~nondet29=0, ldv_malloc_~p~0!base=18446744073709551615, ldv_malloc_~p~0!offset=0, ldv_malloc_~size=624, ldv_malloc_~tmp___0~0=0, ldv_malloc_~tmp~0!base=18446744073709551615, ldv_malloc_~tmp~0!offset=0, ldv_platform_driver_init_1_#t~ret125!base=0, ldv_platform_driver_init_1_#t~ret125!offset=0, ldv_platform_driver_init_1_~tmp~13!base=18446744073709551615, ldv_platform_driver_init_1_~tmp~13!offset=0, main_#t~switch127=true, main_#t~switch129=true, main_#t~switch134=true, main_~tmp___0~4=0, main_~tmp___1~1=1, main_~tmp~14=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~12=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1284] COND TRUE 1 == ~ldv_state_variable_1~0 VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_malloc_#in~size=624, ldv_malloc_#res!base=18446744073709551615, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc30!base=18446744073709551615, ldv_malloc_#t~malloc30!offset=0, ldv_malloc_#t~nondet29=0, ldv_malloc_~p~0!base=18446744073709551615, ldv_malloc_~p~0!offset=0, ldv_malloc_~size=624, ldv_malloc_~tmp___0~0=0, ldv_malloc_~tmp~0!base=18446744073709551615, ldv_malloc_~tmp~0!offset=0, ldv_platform_driver_init_1_#t~ret125!base=0, ldv_platform_driver_init_1_#t~ret125!offset=0, ldv_platform_driver_init_1_~tmp~13!base=18446744073709551615, ldv_platform_driver_init_1_~tmp~13!offset=0, main_#t~switch127=true, main_#t~switch129=true, main_#t~switch134=true, main_~tmp___0~4=0, main_~tmp___1~1=1, main_~tmp~14=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~12=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1285] CALL call main_#t~ret130 := s3c_hwmon_probe(~s3c_hwmon_driver_group1~0); VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1063-L1186] ~dev := #in~dev; [L1065] havoc ~pdata~2; [L1066] havoc ~hwmon~1; [L1067] havoc ~ret~3; [L1068] havoc ~i~0; [L1069] havoc ~tmp~10; [L1070] FCALL call ~#__key~0 := #Ultimate.alloc(8); [L1071] havoc ~tmp___0~3; [L1072] havoc ~tmp___1~0; [L1073] havoc ~tmp___2~0; [L1074] havoc ~tmp___3~0; [L1075] havoc ~cfg~2; [L1078] FCALL call #t~mem83 := read~$Pointer$({ base: ~dev!base, offset: 277 + ~dev!offset }, 8); [L1078] ~pdata~2 := #t~mem83; [L1078] havoc #t~mem83; [L1079] ~ret~3 := 0; VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__key~0!base=52, ~#__key~0!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~dev!base=18446744073709551615, ~dev!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2!base=12376, ~pdata~2!offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1080] COND FALSE !(0 == (~pdata~2!base + ~pdata~2!offset) % 18446744073709551616) [L1086] ldv_kzalloc_9_#in~size, ldv_kzalloc_9_#in~flags := 800, 208; [L1086] havoc ldv_kzalloc_9_#res; [L1086] havoc ldv_kzalloc_9_#t~ret140, ldv_kzalloc_9_~size, ldv_kzalloc_9_~flags, ldv_kzalloc_9_~tmp~19; [L1418-L1426] ldv_kzalloc_9_~size := ldv_kzalloc_9_#in~size; [L1418-L1426] ldv_kzalloc_9_~flags := ldv_kzalloc_9_#in~flags; [L1420] havoc ldv_kzalloc_9_~tmp~19; [L1423] ldv_zalloc_#in~size := ldv_kzalloc_9_~size; [L1423] havoc ldv_zalloc_#res; [L1423] havoc ldv_zalloc_#t~nondet31, ldv_zalloc_#t~malloc32, ldv_zalloc_~size, ldv_zalloc_~p~1, ldv_zalloc_~tmp~1, ldv_zalloc_~tmp___0~1; [L813-L830] ldv_zalloc_~size := ldv_zalloc_#in~size; [L815] havoc ldv_zalloc_~p~1; [L816] havoc ldv_zalloc_~tmp~1; [L817] havoc ldv_zalloc_~tmp___0~1; [L820] assume -2147483648 <= ldv_zalloc_#t~nondet31 && ldv_zalloc_#t~nondet31 <= 2147483647; [L820] ldv_zalloc_~tmp___0~1 := ldv_zalloc_#t~nondet31; [L820] havoc ldv_zalloc_#t~nondet31; VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_zalloc_#in~size=800, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, old(~ldv_count_2~0)=0, ~#__key~0!base=52, ~#__key~0!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~dev!base=18446744073709551615, ~dev!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2!base=12376, ~pdata~2!offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L821] COND FALSE !(0 != ldv_zalloc_~tmp___0~1) [L824] FCALL call ldv_zalloc_#t~malloc32 := #Ultimate.alloc((if ldv_zalloc_~size % 4294967296 % 4294967296 <= 2147483647 then ldv_zalloc_~size % 4294967296 % 4294967296 else ldv_zalloc_~size % 4294967296 % 4294967296 - 4294967296)); VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_zalloc_#in~size=800, ldv_zalloc_#t~malloc32!base=5019, ldv_zalloc_#t~malloc32!offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, old(~ldv_count_2~0)=0, ~#__key~0!base=52, ~#__key~0!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~dev!base=18446744073709551615, ~dev!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2!base=12376, ~pdata~2!offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L824] CALL call #Ultimate.meminit(ldv_zalloc_#t~malloc32, 1, (if ldv_zalloc_~size % 4294967296 % 4294967296 <= 2147483647 then ldv_zalloc_~size % 4294967296 % 4294967296 else ldv_zalloc_~size % 4294967296 % 4294967296 - 4294967296), (if ldv_zalloc_~size % 4294967296 % 4294967296 <= 2147483647 then ldv_zalloc_~size % 4294967296 % 4294967296 else ldv_zalloc_~size % 4294967296 % 4294967296 - 4294967296)); VAL [#amountOfFields=1, #NULL!base=0, #NULL!offset=0, #product=800, #ptr!base=5019, #ptr!offset=0, #sizeOfFields=800, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [?] #memory_int := ~initToZeroAtPointerBaseAddress~int(#memory_int, #ptr!base); [L824] RET call #Ultimate.meminit(ldv_zalloc_#t~malloc32, 1, (if ldv_zalloc_~size % 4294967296 % 4294967296 <= 2147483647 then ldv_zalloc_~size % 4294967296 % 4294967296 else ldv_zalloc_~size % 4294967296 % 4294967296 - 4294967296), (if ldv_zalloc_~size % 4294967296 % 4294967296 <= 2147483647 then ldv_zalloc_~size % 4294967296 % 4294967296 else ldv_zalloc_~size % 4294967296 % 4294967296 - 4294967296)); VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_zalloc_#in~size=800, ldv_zalloc_#t~malloc32!base=5019, ldv_zalloc_#t~malloc32!offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, old(~ldv_count_2~0)=0, ~#__key~0!base=52, ~#__key~0!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~dev!base=18446744073709551615, ~dev!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2!base=12376, ~pdata~2!offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L824] ldv_zalloc_~tmp~1 := ldv_zalloc_#t~malloc32; [L825] ldv_zalloc_~p~1 := ldv_zalloc_~tmp~1; [L826] assume 0 != (if 0 != (ldv_zalloc_~p~1!base + ldv_zalloc_~p~1!offset) % 18446744073709551616 then 1 else 0); [L827] ldv_zalloc_#res := ldv_zalloc_~p~1; VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_zalloc_#in~size=800, ldv_zalloc_#res!base=5019, ldv_zalloc_#res!offset=0, ldv_zalloc_#t~malloc32!base=5019, ldv_zalloc_#t~malloc32!offset=0, ldv_zalloc_~p~1!base=5019, ldv_zalloc_~p~1!offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1!base=5019, ldv_zalloc_~tmp~1!offset=0, old(~ldv_count_2~0)=0, ~#__key~0!base=52, ~#__key~0!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~dev!base=18446744073709551615, ~dev!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2!base=12376, ~pdata~2!offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1423] ldv_kzalloc_9_#t~ret140 := ldv_zalloc_#res; [L1423] ldv_kzalloc_9_~tmp~19 := ldv_kzalloc_9_#t~ret140; [L1423] havoc ldv_kzalloc_9_#t~ret140; [L1424] ldv_kzalloc_9_#res := ldv_kzalloc_9_~tmp~19; [L1086] #t~ret86 := ldv_kzalloc_9_#res; [L1086] ~tmp~10 := #t~ret86; [L1086] havoc #t~ret86; [L1087] ~hwmon~1 := ~tmp~10; VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res!base=5019, ldv_kzalloc_9_#res!offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19!base=5019, ldv_kzalloc_9_~tmp~19!offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res!base=5019, ldv_zalloc_#res!offset=0, ldv_zalloc_#t~malloc32!base=5019, ldv_zalloc_#t~malloc32!offset=0, ldv_zalloc_~p~1!base=5019, ldv_zalloc_~p~1!offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1!base=5019, ldv_zalloc_~tmp~1!offset=0, old(~ldv_count_2~0)=0, ~#__key~0!base=52, ~#__key~0!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~dev!base=18446744073709551615, ~dev!offset=0, ~hwmon~1!base=5019, ~hwmon~1!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2!base=12376, ~pdata~2!offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0, ~tmp~10!base=5019, ~tmp~10!offset=0] [L1088] COND FALSE !(0 == (~hwmon~1!base + ~hwmon~1!offset) % 18446744073709551616) [L1094] platform_set_drvdata_#in~pdev, platform_set_drvdata_#in~data := ~dev, ~hwmon~1; [L1094] havoc platform_set_drvdata_~pdev, platform_set_drvdata_~data; [L909-L917] platform_set_drvdata_~pdev := platform_set_drvdata_#in~pdev; [L909-L917] platform_set_drvdata_~data := platform_set_drvdata_#in~data; [L914] FCALL call dev_set_drvdata({ base: platform_set_drvdata_~pdev!base, offset: 12 + platform_set_drvdata_~pdev!offset }, platform_set_drvdata_~data); [L1095] FCALL call __mutex_init({ base: ~hwmon~1!base, offset: ~hwmon~1!offset }, #t~string89, ~#__key~0); [L1096-L1098] FCALL call #t~ret90 := s3c_adc_register(~dev, { base: 0, offset: 0 }, { base: 0, offset: 0 }, 0); [L1096-L1098] FCALL call write~$Pointer$(#t~ret90, { base: ~hwmon~1!base, offset: 152 + ~hwmon~1!offset }, 8); [L1096-L1098] havoc #t~ret90; [L1099] FCALL call #t~mem91 := read~$Pointer$({ base: ~hwmon~1!base, offset: 152 + ~hwmon~1!offset }, 8); VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem91!base=18446744073709551616, #t~mem91!offset=-18446744073709551616, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res!base=5019, ldv_kzalloc_9_#res!offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19!base=5019, ldv_kzalloc_9_~tmp~19!offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res!base=5019, ldv_zalloc_#res!offset=0, ldv_zalloc_#t~malloc32!base=5019, ldv_zalloc_#t~malloc32!offset=0, ldv_zalloc_~p~1!base=5019, ldv_zalloc_~p~1!offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1!base=5019, ldv_zalloc_~tmp~1!offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data!base=5019, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=18446744073709551615, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=5019, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=18446744073709551615, platform_set_drvdata_~pdev!offset=0, ~#__key~0!base=52, ~#__key~0!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~dev!base=18446744073709551615, ~dev!offset=0, ~hwmon~1!base=5019, ~hwmon~1!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2!base=12376, ~pdata~2!offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0, ~tmp~10!base=5019, ~tmp~10!offset=0] [L1099] CALL call #t~ret92 := IS_ERR(#t~mem91); VAL [#in~ptr!base=18446744073709551616, #in~ptr!offset=-18446744073709551616, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1391-L1399] ~ptr := #in~ptr; [L1393] havoc ~tmp~16; VAL [#in~ptr!base=18446744073709551616, #in~ptr!offset=-18446744073709551616, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ptr!base=18446744073709551616, ~ptr!offset=-18446744073709551616, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1396] CALL call #t~ret137 := ldv_is_err(~ptr); VAL [#in~ptr!base=18446744073709551616, #in~ptr!offset=-18446744073709551616, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1452-L1459] ~ptr := #in~ptr; [L1457] #res := (if 0 == (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0) then 0 else 1); [L1396] RET call #t~ret137 := ldv_is_err(~ptr); VAL [#in~ptr!base=18446744073709551616, #in~ptr!offset=-18446744073709551616, #NULL!base=0, #NULL!offset=0, #t~ret137=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ptr!base=18446744073709551616, ~ptr!offset=-18446744073709551616, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1396] ~tmp~16 := #t~ret137; [L1396] havoc #t~ret137; [L1397] #res := ~tmp~16 % 256; [L1099] RET call #t~ret92 := IS_ERR(#t~mem91); VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem91!base=18446744073709551616, #t~mem91!offset=-18446744073709551616, #t~ret92=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res!base=5019, ldv_kzalloc_9_#res!offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19!base=5019, ldv_kzalloc_9_~tmp~19!offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res!base=5019, ldv_zalloc_#res!offset=0, ldv_zalloc_#t~malloc32!base=5019, ldv_zalloc_#t~malloc32!offset=0, ldv_zalloc_~p~1!base=5019, ldv_zalloc_~p~1!offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1!base=5019, ldv_zalloc_~tmp~1!offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data!base=5019, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=18446744073709551615, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=5019, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=18446744073709551615, platform_set_drvdata_~pdev!offset=0, ~#__key~0!base=52, ~#__key~0!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~dev!base=18446744073709551615, ~dev!offset=0, ~hwmon~1!base=5019, ~hwmon~1!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2!base=12376, ~pdata~2!offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0, ~tmp~10!base=5019, ~tmp~10!offset=0] [L1099] assume -9223372036854775808 <= #t~ret92 && #t~ret92 <= 9223372036854775807; [L1099] ~tmp___1~0 := #t~ret92; [L1099] havoc #t~ret92; [L1099] havoc #t~mem91; VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res!base=5019, ldv_kzalloc_9_#res!offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19!base=5019, ldv_kzalloc_9_~tmp~19!offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res!base=5019, ldv_zalloc_#res!offset=0, ldv_zalloc_#t~malloc32!base=5019, ldv_zalloc_#t~malloc32!offset=0, ldv_zalloc_~p~1!base=5019, ldv_zalloc_~p~1!offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1!base=5019, ldv_zalloc_~tmp~1!offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data!base=5019, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=18446744073709551615, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=5019, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=18446744073709551615, platform_set_drvdata_~pdev!offset=0, ~#__key~0!base=52, ~#__key~0!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~dev!base=18446744073709551615, ~dev!offset=0, ~hwmon~1!base=5019, ~hwmon~1!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2!base=12376, ~pdata~2!offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0, ~tmp___1~0=0, ~tmp~10!base=5019, ~tmp~10!offset=0] [L1100] COND FALSE !(0 != ~tmp___1~0) [L1108] s3c_hwmon_add_raw_#in~dev := { base: ~dev!base, offset: 12 + ~dev!offset }; [L1108] havoc s3c_hwmon_add_raw_#res; [L1108] havoc s3c_hwmon_add_raw_~dev; [L944-L951] s3c_hwmon_add_raw_~dev := s3c_hwmon_add_raw_#in~dev; [L949] s3c_hwmon_add_raw_#res := 0; [L1108] #t~ret97 := s3c_hwmon_add_raw_#res; [L1108] assume -2147483648 <= #t~ret97 && #t~ret97 <= 2147483647; [L1108] ~ret~3 := #t~ret97; [L1108] havoc #t~ret97; VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res!base=5019, ldv_kzalloc_9_#res!offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19!base=5019, ldv_kzalloc_9_~tmp~19!offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res!base=5019, ldv_zalloc_#res!offset=0, ldv_zalloc_#t~malloc32!base=5019, ldv_zalloc_#t~malloc32!offset=0, ldv_zalloc_~p~1!base=5019, ldv_zalloc_~p~1!offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1!base=5019, ldv_zalloc_~tmp~1!offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data!base=5019, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=18446744073709551615, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=5019, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=18446744073709551615, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_add_raw_#in~dev!base=18446744073709551615, s3c_hwmon_add_raw_#in~dev!offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev!base=18446744073709551615, s3c_hwmon_add_raw_~dev!offset=12, ~#__key~0!base=52, ~#__key~0!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~dev!base=18446744073709551615, ~dev!offset=0, ~hwmon~1!base=5019, ~hwmon~1!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2!base=12376, ~pdata~2!offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0, ~tmp___1~0=0, ~tmp~10!base=5019, ~tmp~10!offset=0] [L1109] COND FALSE !(0 != ~ret~3) [L1114] FCALL call #t~ret98 := hwmon_device_register({ base: ~dev!base, offset: 12 + ~dev!offset }); [L1114] FCALL call write~$Pointer$(#t~ret98, { base: ~hwmon~1!base, offset: 160 + ~hwmon~1!offset }, 8); [L1114] havoc #t~ret98; [L1115] FCALL call #t~mem99 := read~$Pointer$({ base: ~hwmon~1!base, offset: 160 + ~hwmon~1!offset }, 8); VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem99!base=9223372036854775808, #t~mem99!offset=27670116110564327424, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res!base=5019, ldv_kzalloc_9_#res!offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19!base=5019, ldv_kzalloc_9_~tmp~19!offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res!base=5019, ldv_zalloc_#res!offset=0, ldv_zalloc_#t~malloc32!base=5019, ldv_zalloc_#t~malloc32!offset=0, ldv_zalloc_~p~1!base=5019, ldv_zalloc_~p~1!offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1!base=5019, ldv_zalloc_~tmp~1!offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data!base=5019, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=18446744073709551615, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=5019, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=18446744073709551615, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_add_raw_#in~dev!base=18446744073709551615, s3c_hwmon_add_raw_#in~dev!offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev!base=18446744073709551615, s3c_hwmon_add_raw_~dev!offset=12, ~#__key~0!base=52, ~#__key~0!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~dev!base=18446744073709551615, ~dev!offset=0, ~hwmon~1!base=5019, ~hwmon~1!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2!base=12376, ~pdata~2!offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0, ~tmp___1~0=0, ~tmp~10!base=5019, ~tmp~10!offset=0] [L1115] CALL call #t~ret100 := IS_ERR(#t~mem99); VAL [#in~ptr!base=9223372036854775808, #in~ptr!offset=27670116110564327424, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1391-L1399] ~ptr := #in~ptr; [L1393] havoc ~tmp~16; VAL [#in~ptr!base=9223372036854775808, #in~ptr!offset=27670116110564327424, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ptr!base=9223372036854775808, ~ptr!offset=27670116110564327424, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1396] CALL call #t~ret137 := ldv_is_err(~ptr); VAL [#in~ptr!base=9223372036854775808, #in~ptr!offset=27670116110564327424, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1452-L1459] ~ptr := #in~ptr; [L1457] #res := (if 0 == (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0) then 0 else 1); [L1396] RET call #t~ret137 := ldv_is_err(~ptr); VAL [#in~ptr!base=9223372036854775808, #in~ptr!offset=27670116110564327424, #NULL!base=0, #NULL!offset=0, #t~ret137=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ptr!base=9223372036854775808, ~ptr!offset=27670116110564327424, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1396] ~tmp~16 := #t~ret137; [L1396] havoc #t~ret137; [L1397] #res := ~tmp~16 % 256; [L1115] RET call #t~ret100 := IS_ERR(#t~mem99); VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem99!base=9223372036854775808, #t~mem99!offset=27670116110564327424, #t~ret100=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res!base=5019, ldv_kzalloc_9_#res!offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19!base=5019, ldv_kzalloc_9_~tmp~19!offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res!base=5019, ldv_zalloc_#res!offset=0, ldv_zalloc_#t~malloc32!base=5019, ldv_zalloc_#t~malloc32!offset=0, ldv_zalloc_~p~1!base=5019, ldv_zalloc_~p~1!offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1!base=5019, ldv_zalloc_~tmp~1!offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data!base=5019, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=18446744073709551615, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=5019, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=18446744073709551615, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_add_raw_#in~dev!base=18446744073709551615, s3c_hwmon_add_raw_#in~dev!offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev!base=18446744073709551615, s3c_hwmon_add_raw_~dev!offset=12, ~#__key~0!base=52, ~#__key~0!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~dev!base=18446744073709551615, ~dev!offset=0, ~hwmon~1!base=5019, ~hwmon~1!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2!base=12376, ~pdata~2!offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0, ~tmp___1~0=0, ~tmp~10!base=5019, ~tmp~10!offset=0] [L1115] assume -9223372036854775808 <= #t~ret100 && #t~ret100 <= 9223372036854775807; [L1115] ~tmp___3~0 := #t~ret100; [L1115] havoc #t~mem99; [L1115] havoc #t~ret100; VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res!base=5019, ldv_kzalloc_9_#res!offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19!base=5019, ldv_kzalloc_9_~tmp~19!offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res!base=5019, ldv_zalloc_#res!offset=0, ldv_zalloc_#t~malloc32!base=5019, ldv_zalloc_#t~malloc32!offset=0, ldv_zalloc_~p~1!base=5019, ldv_zalloc_~p~1!offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1!base=5019, ldv_zalloc_~tmp~1!offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data!base=5019, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=18446744073709551615, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=5019, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=18446744073709551615, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_add_raw_#in~dev!base=18446744073709551615, s3c_hwmon_add_raw_#in~dev!offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev!base=18446744073709551615, s3c_hwmon_add_raw_~dev!offset=12, ~#__key~0!base=52, ~#__key~0!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~dev!base=18446744073709551615, ~dev!offset=0, ~hwmon~1!base=5019, ~hwmon~1!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2!base=12376, ~pdata~2!offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0, ~tmp___1~0=0, ~tmp___3~0=0, ~tmp~10!base=5019, ~tmp~10!offset=0] [L1116] COND FALSE !(0 != ~tmp___3~0) [L1124] ~i~0 := 0; VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res!base=5019, ldv_kzalloc_9_#res!offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19!base=5019, ldv_kzalloc_9_~tmp~19!offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res!base=5019, ldv_zalloc_#res!offset=0, ldv_zalloc_#t~malloc32!base=5019, ldv_zalloc_#t~malloc32!offset=0, ldv_zalloc_~p~1!base=5019, ldv_zalloc_~p~1!offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1!base=5019, ldv_zalloc_~tmp~1!offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data!base=5019, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=18446744073709551615, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=5019, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=18446744073709551615, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_add_raw_#in~dev!base=18446744073709551615, s3c_hwmon_add_raw_#in~dev!offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev!base=18446744073709551615, s3c_hwmon_add_raw_~dev!offset=12, ~#__key~0!base=52, ~#__key~0!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~dev!base=18446744073709551615, ~dev!offset=0, ~hwmon~1!base=5019, ~hwmon~1!offset=0, ~i~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2!base=12376, ~pdata~2!offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0, ~tmp___1~0=0, ~tmp___3~0=0, ~tmp~10!base=5019, ~tmp~10!offset=0] [L1169] COND TRUE ~i~0 % 4294967296 <= 7 [L1127] FCALL call #t~mem105 := read~$Pointer$({ base: ~pdata~2!base, offset: ~pdata~2!offset + 8 * ~i~0 }, 8); [L1127] ~cfg~2 := #t~mem105; [L1127] havoc #t~mem105; VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res!base=5019, ldv_kzalloc_9_#res!offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19!base=5019, ldv_kzalloc_9_~tmp~19!offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res!base=5019, ldv_zalloc_#res!offset=0, ldv_zalloc_#t~malloc32!base=5019, ldv_zalloc_#t~malloc32!offset=0, ldv_zalloc_~p~1!base=5019, ldv_zalloc_~p~1!offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1!base=5019, ldv_zalloc_~tmp~1!offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data!base=5019, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=18446744073709551615, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=5019, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=18446744073709551615, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_add_raw_#in~dev!base=18446744073709551615, s3c_hwmon_add_raw_#in~dev!offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev!base=18446744073709551615, s3c_hwmon_add_raw_~dev!offset=12, ~#__key~0!base=52, ~#__key~0!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~cfg~2!base=18446744073709548820, ~cfg~2!offset=148, ~dev!base=18446744073709551615, ~dev!offset=0, ~hwmon~1!base=5019, ~hwmon~1!offset=0, ~i~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2!base=12376, ~pdata~2!offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0, ~tmp___1~0=0, ~tmp___3~0=0, ~tmp~10!base=5019, ~tmp~10!offset=0] [L1128] COND FALSE !(0 == (~cfg~2!base + ~cfg~2!offset) % 18446744073709551616) [L1133] FCALL call #t~mem106 := read~int({ base: ~cfg~2!base, offset: 8 + ~cfg~2!offset }, 4); [L1133] COND FALSE !(#t~mem106 % 4294967296 > 65535) [L1133] havoc #t~mem106; [L1139] FCALL call #t~mem109 := read~int({ base: ~cfg~2!base, offset: 12 + ~cfg~2!offset }, 4); VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem109=25778393710593, #t~nondet107=68, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res!base=5019, ldv_kzalloc_9_#res!offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19!base=5019, ldv_kzalloc_9_~tmp~19!offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res!base=5019, ldv_zalloc_#res!offset=0, ldv_zalloc_#t~malloc32!base=5019, ldv_zalloc_#t~malloc32!offset=0, ldv_zalloc_~p~1!base=5019, ldv_zalloc_~p~1!offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1!base=5019, ldv_zalloc_~tmp~1!offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data!base=5019, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=18446744073709551615, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=5019, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=18446744073709551615, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_add_raw_#in~dev!base=18446744073709551615, s3c_hwmon_add_raw_#in~dev!offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev!base=18446744073709551615, s3c_hwmon_add_raw_~dev!offset=12, ~#__key~0!base=52, ~#__key~0!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~cfg~2!base=18446744073709548820, ~cfg~2!offset=148, ~dev!base=18446744073709551615, ~dev!offset=0, ~hwmon~1!base=5019, ~hwmon~1!offset=0, ~i~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2!base=12376, ~pdata~2!offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0, ~tmp___1~0=0, ~tmp___3~0=0, ~tmp~10!base=5019, ~tmp~10!offset=0] [L1139] COND FALSE !(0 == #t~mem109 % 4294967296) [L1139] havoc #t~mem109; [L1145] FCALL call #t~mem112 := read~$Pointer$({ base: ~pdata~2!base, offset: ~pdata~2!offset + 8 * ~i~0 }, 8); [L1145-L1146] s3c_hwmon_create_attr_#in~dev, s3c_hwmon_create_attr_#in~cfg, s3c_hwmon_create_attr_#in~attrs, s3c_hwmon_create_attr_#in~channel := { base: ~dev!base, offset: 12 + ~dev!offset }, #t~mem112, { base: ~hwmon~1!base, offset: 168 + ~hwmon~1!offset + 116 * (~i~0 % 4294967296) }, ~i~0; [L1145-L1146] havoc s3c_hwmon_create_attr_#res; [L1145-L1146] havoc s3c_hwmon_create_attr_#t~nondet72, s3c_hwmon_create_attr_#t~ret74, s3c_hwmon_create_attr_#t~nondet75, s3c_hwmon_create_attr_#t~mem77, s3c_hwmon_create_attr_#t~nondet78, s3c_hwmon_create_attr_#t~ret80, s3c_hwmon_create_attr_#t~nondet81, s3c_hwmon_create_attr_~dev, s3c_hwmon_create_attr_~cfg, s3c_hwmon_create_attr_~attrs, s3c_hwmon_create_attr_~channel, s3c_hwmon_create_attr_~attr~0, s3c_hwmon_create_attr_~ret~2; [L1013-L1052] s3c_hwmon_create_attr_~dev := s3c_hwmon_create_attr_#in~dev; [L1013-L1052] s3c_hwmon_create_attr_~cfg := s3c_hwmon_create_attr_#in~cfg; [L1013-L1052] s3c_hwmon_create_attr_~attrs := s3c_hwmon_create_attr_#in~attrs; [L1013-L1052] s3c_hwmon_create_attr_~channel := s3c_hwmon_create_attr_#in~channel; [L1016] havoc s3c_hwmon_create_attr_~attr~0; [L1017] havoc s3c_hwmon_create_attr_~ret~2; [L1020] havoc s3c_hwmon_create_attr_#t~nondet72; [L1021] s3c_hwmon_create_attr_~attr~0 := { base: s3c_hwmon_create_attr_~attrs!base, offset: s3c_hwmon_create_attr_~attrs!offset }; [L1022] FCALL call write~int(s3c_hwmon_create_attr_~channel, { base: s3c_hwmon_create_attr_~attr~0!base, offset: 42 + s3c_hwmon_create_attr_~attr~0!offset }, 4); [L1023] FCALL call write~$Pointer$({ base: s3c_hwmon_create_attr_~attrs!base, offset: 92 + s3c_hwmon_create_attr_~attrs!offset }, { base: s3c_hwmon_create_attr_~attr~0!base, offset: s3c_hwmon_create_attr_~attr~0!offset }, 8); [L1024] FCALL call write~int(292, { base: s3c_hwmon_create_attr_~attr~0!base, offset: 8 + s3c_hwmon_create_attr_~attr~0!offset }, 2); [L1025] FCALL call write~$Pointer$(#funAddr~s3c_hwmon_ch_show, { base: s3c_hwmon_create_attr_~attr~0!base, offset: 26 + s3c_hwmon_create_attr_~attr~0!offset }, 8); [L1026] ldv_device_create_file_7_#in~ldv_func_arg1, ldv_device_create_file_7_#in~ldv_func_arg2 := s3c_hwmon_create_attr_~dev, { base: s3c_hwmon_create_attr_~attr~0!base, offset: s3c_hwmon_create_attr_~attr~0!offset }; [L1026] havoc ldv_device_create_file_7_#res; [L1026] havoc ldv_device_create_file_7_#t~ret138, ldv_device_create_file_7_~ldv_func_arg1, ldv_device_create_file_7_~ldv_func_arg2, ldv_device_create_file_7_~tmp~17; [L1400-L1408] ldv_device_create_file_7_~ldv_func_arg1 := ldv_device_create_file_7_#in~ldv_func_arg1; [L1400-L1408] ldv_device_create_file_7_~ldv_func_arg2 := ldv_device_create_file_7_#in~ldv_func_arg2; [L1402] havoc ldv_device_create_file_7_~tmp~17; VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem112!base=18446744073709548820, #t~mem112!offset=148, #t~nondet107=68, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_device_create_file_7_#in~ldv_func_arg1!base=18446744073709551615, ldv_device_create_file_7_#in~ldv_func_arg1!offset=12, ldv_device_create_file_7_#in~ldv_func_arg2!base=5019, ldv_device_create_file_7_#in~ldv_func_arg2!offset=168, ldv_device_create_file_7_~ldv_func_arg1!base=18446744073709551615, ldv_device_create_file_7_~ldv_func_arg1!offset=12, ldv_device_create_file_7_~ldv_func_arg2!base=5019, ldv_device_create_file_7_~ldv_func_arg2!offset=168, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res!base=5019, ldv_kzalloc_9_#res!offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19!base=5019, ldv_kzalloc_9_~tmp~19!offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res!base=5019, ldv_zalloc_#res!offset=0, ldv_zalloc_#t~malloc32!base=5019, ldv_zalloc_#t~malloc32!offset=0, ldv_zalloc_~p~1!base=5019, ldv_zalloc_~p~1!offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1!base=5019, ldv_zalloc_~tmp~1!offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data!base=5019, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=18446744073709551615, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=5019, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=18446744073709551615, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_add_raw_#in~dev!base=18446744073709551615, s3c_hwmon_add_raw_#in~dev!offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev!base=18446744073709551615, s3c_hwmon_add_raw_~dev!offset=12, s3c_hwmon_create_attr_#in~attrs!base=5019, s3c_hwmon_create_attr_#in~attrs!offset=168, s3c_hwmon_create_attr_#in~cfg!base=18446744073709548820, s3c_hwmon_create_attr_#in~cfg!offset=148, s3c_hwmon_create_attr_#in~channel=0, s3c_hwmon_create_attr_#in~dev!base=18446744073709551615, s3c_hwmon_create_attr_#in~dev!offset=12, s3c_hwmon_create_attr_~attrs!base=5019, s3c_hwmon_create_attr_~attrs!offset=168, s3c_hwmon_create_attr_~attr~0!base=5019, s3c_hwmon_create_attr_~attr~0!offset=168, s3c_hwmon_create_attr_~cfg!base=18446744073709548820, s3c_hwmon_create_attr_~cfg!offset=148, s3c_hwmon_create_attr_~channel=0, s3c_hwmon_create_attr_~dev!base=18446744073709551615, s3c_hwmon_create_attr_~dev!offset=12, ~#__key~0!base=52, ~#__key~0!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~cfg~2!base=18446744073709548820, ~cfg~2!offset=148, ~dev!base=18446744073709551615, ~dev!offset=0, ~hwmon~1!base=5019, ~hwmon~1!offset=0, ~i~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2!base=12376, ~pdata~2!offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0, ~tmp___1~0=0, ~tmp___3~0=0, ~tmp~10!base=5019, ~tmp~10!offset=0] [L1405] CALL call ldv_device_create_file_7_#t~ret138 := ldv_device_create_file(); VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1508] havoc ~nondetermined~0; [L1509] havoc ~tmp~22; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1512] CALL call #t~ret143 := ldv_undef_int(); VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L854] havoc ~tmp~4; [L857] assume -2147483648 <= #t~nondet35 && #t~nondet35 <= 2147483647; [L857] ~tmp~4 := #t~nondet35; [L857] havoc #t~nondet35; [L858] #res := ~tmp~4; [L1512] RET call #t~ret143 := ldv_undef_int(); VAL [#NULL!base=0, #NULL!offset=0, #t~ret143=-1, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1512] assume -2147483648 <= #t~ret143 && #t~ret143 <= 2147483647; [L1512] ~nondetermined~0 := #t~ret143; [L1512] havoc #t~ret143; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~nondetermined~0=-1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1513] COND TRUE 0 != ~nondetermined~0 [L1514] ~ldv_count_2~0 := 1 + ~ldv_count_2~0; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~nondetermined~0=-1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1515] COND TRUE ~ldv_count_1~0 < ~ldv_count_2~0 VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~nondetermined~0=-1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1433] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~nondetermined~0=-1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L938] FCALL call #t~string52 := #Ultimate.alloc(4); [L938] FCALL call write~init~int(60, { base: #t~string52!base, offset: #t~string52!offset }, 1); [L938] FCALL call write~init~int(55, { base: #t~string52!base, offset: 1 + #t~string52!offset }, 1); [L938] FCALL call write~init~int(62, { base: #t~string52!base, offset: 2 + #t~string52!offset }, 1); [L938] FCALL call write~init~int(0, { base: #t~string52!base, offset: 3 + #t~string52!offset }, 1); [L938] FCALL call #t~string53 := #Ultimate.alloc(20); [L991] FCALL call #t~string65 := #Ultimate.alloc(4); [L991] FCALL call write~init~int(37, { base: #t~string65!base, offset: #t~string65!offset }, 1); [L991] FCALL call write~init~int(100, { base: #t~string65!base, offset: 1 + #t~string65!offset }, 1); [L991] FCALL call write~init~int(10, { base: #t~string65!base, offset: 2 + #t~string65!offset }, 1); [L991] FCALL call write~init~int(0, { base: #t~string65!base, offset: 3 + #t~string65!offset }, 1); [L1009] FCALL call #t~string70 := #Ultimate.alloc(4); [L1009] FCALL call write~init~int(37, { base: #t~string70!base, offset: #t~string70!offset }, 1); [L1009] FCALL call write~init~int(115, { base: #t~string70!base, offset: 1 + #t~string70!offset }, 1); [L1009] FCALL call write~init~int(10, { base: #t~string70!base, offset: 2 + #t~string70!offset }, 1); [L1009] FCALL call write~init~int(0, { base: #t~string70!base, offset: 3 + #t~string70!offset }, 1); [L1020] FCALL call #t~string73 := #Ultimate.alloc(11); [L1028] FCALL call #t~string76 := #Ultimate.alloc(34); [L1034] FCALL call #t~string79 := #Ultimate.alloc(11); [L1043] FCALL call #t~string82 := #Ultimate.alloc(34); [L1081] FCALL call #t~string85 := #Ultimate.alloc(27); [L1089] FCALL call #t~string88 := #Ultimate.alloc(11); [L1095] FCALL call #t~string89 := #Ultimate.alloc(13); [L1101] FCALL call #t~string94 := #Ultimate.alloc(21); [L1117] FCALL call #t~string102 := #Ultimate.alloc(30); [L1134] FCALL call #t~string108 := #Ultimate.alloc(33); [L1140] FCALL call #t~string111 := #Ultimate.alloc(25); [L1148] FCALL call #t~string115 := #Ultimate.alloc(27); [L1213] FCALL call #t~string121 := #Ultimate.alloc(10); [L888] ~LDV_IN_INTERRUPT~0 := 1; [L889] ~ref_cnt~0 := 0; [L890] ~ldv_state_variable_1~0 := 0; [L892] ~probed_1~0 := 0; [L893] ~ldv_state_variable_0~0 := 0; [L1234] ~ldv_retval_0~0 := 0; [L1235] ~ldv_retval_1~0 := 0; [L1238] ~ldv_retval_2~0 := 0; [L1495] ~ldv_count_1~0 := 0; [L1496] ~ldv_count_2~0 := 0; [L891] ~s3c_hwmon_driver_group1~0 := { base: 0, offset: 0 }; [L1213-L1215] FCALL call ~#s3c_hwmon_driver~0 := #Ultimate.alloc(153); [L1213-L1215] FCALL call write~init~$Pointer$(#funAddr~s3c_hwmon_probe, { base: ~#s3c_hwmon_driver~0!base, offset: ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$(#funAddr~s3c_hwmon_remove, { base: ~#s3c_hwmon_driver~0!base, offset: 8 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 16 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 24 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 32 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$(#t~string121, { base: ~#s3c_hwmon_driver~0!base, offset: 40 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 48 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#s3c_hwmon_driver~0!base, offset: 56 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 64 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~int(0, { base: ~#s3c_hwmon_driver~0!base, offset: 72 + ~#s3c_hwmon_driver~0!offset }, 1); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 73 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 81 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 89 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 97 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 105 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 113 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 121 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 129 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 137 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 145 + ~#s3c_hwmon_driver~0!offset }, 8); [?] havoc main_#res; [?] havoc main_#t~nondet126, main_#t~switch127, main_#t~nondet128, main_#t~switch129, main_#t~ret130, main_#t~ret131, main_#t~ret132, main_#t~nondet133, main_#t~switch134, main_#t~ret135, main_~tmp~14, main_~tmp___0~4, main_~tmp___1~1; [L1267] havoc main_~tmp~14; [L1268] havoc main_~tmp___0~4; [L1269] havoc main_~tmp___1~1; [L1273] ~ldv_state_variable_1~0 := 0; [L1274] ~ref_cnt~0 := 0; [L1275] ~ldv_state_variable_0~0 := 1; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=0, ~s3c_hwmon_driver_group1~0!offset=0] [L1277] assume -2147483648 <= main_#t~nondet126 && main_#t~nondet126 <= 2147483647; [L1277] main_~tmp~14 := main_#t~nondet126; [L1277] havoc main_#t~nondet126; [L1279] main_#t~switch127 := 0 == main_~tmp~14; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, main_#t~switch127=false, main_~tmp~14=1, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=0, ~s3c_hwmon_driver_group1~0!offset=0] [L1278-L1374] COND FALSE !(main_#t~switch127) [L1331] main_#t~switch127 := main_#t~switch127 || 1 == main_~tmp~14; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, main_#t~switch127=true, main_~tmp~14=1, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=0, ~s3c_hwmon_driver_group1~0!offset=0] [L1278-L1374] COND TRUE main_#t~switch127 VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, main_#t~switch127=true, main_~tmp~14=1, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=0, ~s3c_hwmon_driver_group1~0!offset=0] [L1332] COND TRUE 0 != ~ldv_state_variable_0~0 [L1333] assume -2147483648 <= main_#t~nondet133 && main_#t~nondet133 <= 2147483647; [L1333] main_~tmp___1~1 := main_#t~nondet133; [L1333] havoc main_#t~nondet133; [L1335] main_#t~switch134 := 0 == main_~tmp___1~1; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, main_#t~switch127=true, main_#t~switch134=false, main_~tmp___1~1=1, main_~tmp~14=1, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=0, ~s3c_hwmon_driver_group1~0!offset=0] [L1334-L1366] COND FALSE !(main_#t~switch134) [L1344] main_#t~switch134 := main_#t~switch134 || 1 == main_~tmp___1~1; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, main_#t~switch127=true, main_#t~switch134=true, main_~tmp___1~1=1, main_~tmp~14=1, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=0, ~s3c_hwmon_driver_group1~0!offset=0] [L1334-L1366] COND TRUE main_#t~switch134 VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, main_#t~switch127=true, main_#t~switch134=true, main_~tmp___1~1=1, main_~tmp~14=1, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=0, ~s3c_hwmon_driver_group1~0!offset=0] [L1345] COND TRUE 1 == ~ldv_state_variable_0~0 [L1346] havoc s3c_hwmon_init_#res; [L1346] havoc s3c_hwmon_init_#t~ret122, s3c_hwmon_init_~tmp~12; [L1218] havoc s3c_hwmon_init_~tmp~12; [L1221] FCALL call s3c_hwmon_init_#t~ret122 := platform_driver_register(~#s3c_hwmon_driver~0); [L1221] assume -2147483648 <= s3c_hwmon_init_#t~ret122 && s3c_hwmon_init_#t~ret122 <= 2147483647; [L1221] s3c_hwmon_init_~tmp~12 := s3c_hwmon_init_#t~ret122; [L1221] havoc s3c_hwmon_init_#t~ret122; [L1222] s3c_hwmon_init_#res := s3c_hwmon_init_~tmp~12; [L1346] main_#t~ret135 := s3c_hwmon_init_#res; [L1346] assume -2147483648 <= main_#t~ret135 && main_#t~ret135 <= 2147483647; [L1346] ~ldv_retval_2~0 := main_#t~ret135; [L1346] havoc main_#t~ret135; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, main_#t~switch127=true, main_#t~switch134=true, main_~tmp___1~1=1, main_~tmp~14=1, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~12=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=0, ~s3c_hwmon_driver_group1~0!offset=0] [L1347] COND FALSE !(0 != ~ldv_retval_2~0) [L1353] COND TRUE 0 == ~ldv_retval_2~0 [L1354] ~ldv_state_variable_0~0 := 2; [L1355] ~ldv_state_variable_1~0 := 1; [L1356] havoc ldv_platform_driver_init_1_#t~ret125, ldv_platform_driver_init_1_~tmp~13; [L1256] havoc ldv_platform_driver_init_1_~tmp~13; [L1259] ldv_malloc_#in~size := 624; [L1259] havoc ldv_malloc_#res; [L1259] havoc ldv_malloc_#t~nondet29, ldv_malloc_#t~malloc30, ldv_malloc_~size, ldv_malloc_~p~0, ldv_malloc_~tmp~0, ldv_malloc_~tmp___0~0; [L795-L812] ldv_malloc_~size := ldv_malloc_#in~size; [L797] havoc ldv_malloc_~p~0; [L798] havoc ldv_malloc_~tmp~0; [L799] havoc ldv_malloc_~tmp___0~0; [L802] assume -2147483648 <= ldv_malloc_#t~nondet29 && ldv_malloc_#t~nondet29 <= 2147483647; [L802] ldv_malloc_~tmp___0~0 := ldv_malloc_#t~nondet29; [L802] havoc ldv_malloc_#t~nondet29; [L803] COND FALSE !(0 != ldv_malloc_~tmp___0~0) [L806] FCALL call ldv_malloc_#t~malloc30 := #Ultimate.alloc(ldv_malloc_~size); [L806] ldv_malloc_~tmp~0 := ldv_malloc_#t~malloc30; [L807] ldv_malloc_~p~0 := ldv_malloc_~tmp~0; [L808] assume 0 != (if 0 != (ldv_malloc_~p~0!base + ldv_malloc_~p~0!offset) % 18446744073709551616 then 1 else 0); [L809] ldv_malloc_#res := ldv_malloc_~p~0; [L1259] ldv_platform_driver_init_1_#t~ret125 := ldv_malloc_#res; [L1259] ldv_platform_driver_init_1_~tmp~13 := ldv_platform_driver_init_1_#t~ret125; [L1259] havoc ldv_platform_driver_init_1_#t~ret125; [L1260] assume 0 != (if 0 != (ldv_platform_driver_init_1_~tmp~13!base + ldv_platform_driver_init_1_~tmp~13!offset) % 18446744073709551616 then 1 else 0); [L1261] ~s3c_hwmon_driver_group1~0 := ldv_platform_driver_init_1_~tmp~13; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_malloc_#in~size=624, ldv_malloc_#res!base=18446744073709551615, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc30!base=18446744073709551615, ldv_malloc_#t~malloc30!offset=0, ldv_malloc_#t~nondet29=0, ldv_malloc_~p~0!base=18446744073709551615, ldv_malloc_~p~0!offset=0, ldv_malloc_~size=624, ldv_malloc_~tmp___0~0=0, ldv_malloc_~tmp~0!base=18446744073709551615, ldv_malloc_~tmp~0!offset=0, ldv_platform_driver_init_1_#t~ret125!base=0, ldv_platform_driver_init_1_#t~ret125!offset=0, ldv_platform_driver_init_1_~tmp~13!base=18446744073709551615, ldv_platform_driver_init_1_~tmp~13!offset=0, main_#t~switch127=true, main_#t~switch134=true, main_~tmp___1~1=1, main_~tmp~14=1, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~12=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1277] assume -2147483648 <= main_#t~nondet126 && main_#t~nondet126 <= 2147483647; [L1277] main_~tmp~14 := main_#t~nondet126; [L1277] havoc main_#t~nondet126; [L1279] main_#t~switch127 := 0 == main_~tmp~14; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_malloc_#in~size=624, ldv_malloc_#res!base=18446744073709551615, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc30!base=18446744073709551615, ldv_malloc_#t~malloc30!offset=0, ldv_malloc_#t~nondet29=0, ldv_malloc_~p~0!base=18446744073709551615, ldv_malloc_~p~0!offset=0, ldv_malloc_~size=624, ldv_malloc_~tmp___0~0=0, ldv_malloc_~tmp~0!base=18446744073709551615, ldv_malloc_~tmp~0!offset=0, ldv_platform_driver_init_1_#t~ret125!base=0, ldv_platform_driver_init_1_#t~ret125!offset=0, ldv_platform_driver_init_1_~tmp~13!base=18446744073709551615, ldv_platform_driver_init_1_~tmp~13!offset=0, main_#t~switch127=true, main_#t~switch134=true, main_~tmp___1~1=1, main_~tmp~14=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~12=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1278-L1374] COND TRUE main_#t~switch127 VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_malloc_#in~size=624, ldv_malloc_#res!base=18446744073709551615, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc30!base=18446744073709551615, ldv_malloc_#t~malloc30!offset=0, ldv_malloc_#t~nondet29=0, ldv_malloc_~p~0!base=18446744073709551615, ldv_malloc_~p~0!offset=0, ldv_malloc_~size=624, ldv_malloc_~tmp___0~0=0, ldv_malloc_~tmp~0!base=18446744073709551615, ldv_malloc_~tmp~0!offset=0, ldv_platform_driver_init_1_#t~ret125!base=0, ldv_platform_driver_init_1_#t~ret125!offset=0, ldv_platform_driver_init_1_~tmp~13!base=18446744073709551615, ldv_platform_driver_init_1_~tmp~13!offset=0, main_#t~switch127=true, main_#t~switch134=true, main_~tmp___1~1=1, main_~tmp~14=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~12=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1280] COND TRUE 0 != ~ldv_state_variable_1~0 [L1281] assume -2147483648 <= main_#t~nondet128 && main_#t~nondet128 <= 2147483647; [L1281] main_~tmp___0~4 := main_#t~nondet128; [L1281] havoc main_#t~nondet128; [L1283] main_#t~switch129 := 0 == main_~tmp___0~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_malloc_#in~size=624, ldv_malloc_#res!base=18446744073709551615, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc30!base=18446744073709551615, ldv_malloc_#t~malloc30!offset=0, ldv_malloc_#t~nondet29=0, ldv_malloc_~p~0!base=18446744073709551615, ldv_malloc_~p~0!offset=0, ldv_malloc_~size=624, ldv_malloc_~tmp___0~0=0, ldv_malloc_~tmp~0!base=18446744073709551615, ldv_malloc_~tmp~0!offset=0, ldv_platform_driver_init_1_#t~ret125!base=0, ldv_platform_driver_init_1_#t~ret125!offset=0, ldv_platform_driver_init_1_~tmp~13!base=18446744073709551615, ldv_platform_driver_init_1_~tmp~13!offset=0, main_#t~switch127=true, main_#t~switch129=true, main_#t~switch134=true, main_~tmp___0~4=0, main_~tmp___1~1=1, main_~tmp~14=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~12=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1282-L1325] COND TRUE main_#t~switch129 VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_malloc_#in~size=624, ldv_malloc_#res!base=18446744073709551615, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc30!base=18446744073709551615, ldv_malloc_#t~malloc30!offset=0, ldv_malloc_#t~nondet29=0, ldv_malloc_~p~0!base=18446744073709551615, ldv_malloc_~p~0!offset=0, ldv_malloc_~size=624, ldv_malloc_~tmp___0~0=0, ldv_malloc_~tmp~0!base=18446744073709551615, ldv_malloc_~tmp~0!offset=0, ldv_platform_driver_init_1_#t~ret125!base=0, ldv_platform_driver_init_1_#t~ret125!offset=0, ldv_platform_driver_init_1_~tmp~13!base=18446744073709551615, ldv_platform_driver_init_1_~tmp~13!offset=0, main_#t~switch127=true, main_#t~switch129=true, main_#t~switch134=true, main_~tmp___0~4=0, main_~tmp___1~1=1, main_~tmp~14=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~12=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1284] COND TRUE 1 == ~ldv_state_variable_1~0 VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_malloc_#in~size=624, ldv_malloc_#res!base=18446744073709551615, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc30!base=18446744073709551615, ldv_malloc_#t~malloc30!offset=0, ldv_malloc_#t~nondet29=0, ldv_malloc_~p~0!base=18446744073709551615, ldv_malloc_~p~0!offset=0, ldv_malloc_~size=624, ldv_malloc_~tmp___0~0=0, ldv_malloc_~tmp~0!base=18446744073709551615, ldv_malloc_~tmp~0!offset=0, ldv_platform_driver_init_1_#t~ret125!base=0, ldv_platform_driver_init_1_#t~ret125!offset=0, ldv_platform_driver_init_1_~tmp~13!base=18446744073709551615, ldv_platform_driver_init_1_~tmp~13!offset=0, main_#t~switch127=true, main_#t~switch129=true, main_#t~switch134=true, main_~tmp___0~4=0, main_~tmp___1~1=1, main_~tmp~14=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~12=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1285] CALL call main_#t~ret130 := s3c_hwmon_probe(~s3c_hwmon_driver_group1~0); VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1063-L1186] ~dev := #in~dev; [L1065] havoc ~pdata~2; [L1066] havoc ~hwmon~1; [L1067] havoc ~ret~3; [L1068] havoc ~i~0; [L1069] havoc ~tmp~10; [L1070] FCALL call ~#__key~0 := #Ultimate.alloc(8); [L1071] havoc ~tmp___0~3; [L1072] havoc ~tmp___1~0; [L1073] havoc ~tmp___2~0; [L1074] havoc ~tmp___3~0; [L1075] havoc ~cfg~2; [L1078] FCALL call #t~mem83 := read~$Pointer$({ base: ~dev!base, offset: 277 + ~dev!offset }, 8); [L1078] ~pdata~2 := #t~mem83; [L1078] havoc #t~mem83; [L1079] ~ret~3 := 0; VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__key~0!base=52, ~#__key~0!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~dev!base=18446744073709551615, ~dev!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2!base=12376, ~pdata~2!offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1080] COND FALSE !(0 == (~pdata~2!base + ~pdata~2!offset) % 18446744073709551616) [L1086] ldv_kzalloc_9_#in~size, ldv_kzalloc_9_#in~flags := 800, 208; [L1086] havoc ldv_kzalloc_9_#res; [L1086] havoc ldv_kzalloc_9_#t~ret140, ldv_kzalloc_9_~size, ldv_kzalloc_9_~flags, ldv_kzalloc_9_~tmp~19; [L1418-L1426] ldv_kzalloc_9_~size := ldv_kzalloc_9_#in~size; [L1418-L1426] ldv_kzalloc_9_~flags := ldv_kzalloc_9_#in~flags; [L1420] havoc ldv_kzalloc_9_~tmp~19; [L1423] ldv_zalloc_#in~size := ldv_kzalloc_9_~size; [L1423] havoc ldv_zalloc_#res; [L1423] havoc ldv_zalloc_#t~nondet31, ldv_zalloc_#t~malloc32, ldv_zalloc_~size, ldv_zalloc_~p~1, ldv_zalloc_~tmp~1, ldv_zalloc_~tmp___0~1; [L813-L830] ldv_zalloc_~size := ldv_zalloc_#in~size; [L815] havoc ldv_zalloc_~p~1; [L816] havoc ldv_zalloc_~tmp~1; [L817] havoc ldv_zalloc_~tmp___0~1; [L820] assume -2147483648 <= ldv_zalloc_#t~nondet31 && ldv_zalloc_#t~nondet31 <= 2147483647; [L820] ldv_zalloc_~tmp___0~1 := ldv_zalloc_#t~nondet31; [L820] havoc ldv_zalloc_#t~nondet31; VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_zalloc_#in~size=800, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, old(~ldv_count_2~0)=0, ~#__key~0!base=52, ~#__key~0!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~dev!base=18446744073709551615, ~dev!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2!base=12376, ~pdata~2!offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L821] COND FALSE !(0 != ldv_zalloc_~tmp___0~1) [L824] FCALL call ldv_zalloc_#t~malloc32 := #Ultimate.alloc((if ldv_zalloc_~size % 4294967296 % 4294967296 <= 2147483647 then ldv_zalloc_~size % 4294967296 % 4294967296 else ldv_zalloc_~size % 4294967296 % 4294967296 - 4294967296)); VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_zalloc_#in~size=800, ldv_zalloc_#t~malloc32!base=5019, ldv_zalloc_#t~malloc32!offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, old(~ldv_count_2~0)=0, ~#__key~0!base=52, ~#__key~0!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~dev!base=18446744073709551615, ~dev!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2!base=12376, ~pdata~2!offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L824] CALL call #Ultimate.meminit(ldv_zalloc_#t~malloc32, 1, (if ldv_zalloc_~size % 4294967296 % 4294967296 <= 2147483647 then ldv_zalloc_~size % 4294967296 % 4294967296 else ldv_zalloc_~size % 4294967296 % 4294967296 - 4294967296), (if ldv_zalloc_~size % 4294967296 % 4294967296 <= 2147483647 then ldv_zalloc_~size % 4294967296 % 4294967296 else ldv_zalloc_~size % 4294967296 % 4294967296 - 4294967296)); VAL [#amountOfFields=1, #NULL!base=0, #NULL!offset=0, #product=800, #ptr!base=5019, #ptr!offset=0, #sizeOfFields=800, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [?] #memory_int := ~initToZeroAtPointerBaseAddress~int(#memory_int, #ptr!base); [L824] RET call #Ultimate.meminit(ldv_zalloc_#t~malloc32, 1, (if ldv_zalloc_~size % 4294967296 % 4294967296 <= 2147483647 then ldv_zalloc_~size % 4294967296 % 4294967296 else ldv_zalloc_~size % 4294967296 % 4294967296 - 4294967296), (if ldv_zalloc_~size % 4294967296 % 4294967296 <= 2147483647 then ldv_zalloc_~size % 4294967296 % 4294967296 else ldv_zalloc_~size % 4294967296 % 4294967296 - 4294967296)); VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_zalloc_#in~size=800, ldv_zalloc_#t~malloc32!base=5019, ldv_zalloc_#t~malloc32!offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, old(~ldv_count_2~0)=0, ~#__key~0!base=52, ~#__key~0!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~dev!base=18446744073709551615, ~dev!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2!base=12376, ~pdata~2!offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L824] ldv_zalloc_~tmp~1 := ldv_zalloc_#t~malloc32; [L825] ldv_zalloc_~p~1 := ldv_zalloc_~tmp~1; [L826] assume 0 != (if 0 != (ldv_zalloc_~p~1!base + ldv_zalloc_~p~1!offset) % 18446744073709551616 then 1 else 0); [L827] ldv_zalloc_#res := ldv_zalloc_~p~1; VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_zalloc_#in~size=800, ldv_zalloc_#res!base=5019, ldv_zalloc_#res!offset=0, ldv_zalloc_#t~malloc32!base=5019, ldv_zalloc_#t~malloc32!offset=0, ldv_zalloc_~p~1!base=5019, ldv_zalloc_~p~1!offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1!base=5019, ldv_zalloc_~tmp~1!offset=0, old(~ldv_count_2~0)=0, ~#__key~0!base=52, ~#__key~0!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~dev!base=18446744073709551615, ~dev!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2!base=12376, ~pdata~2!offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1423] ldv_kzalloc_9_#t~ret140 := ldv_zalloc_#res; [L1423] ldv_kzalloc_9_~tmp~19 := ldv_kzalloc_9_#t~ret140; [L1423] havoc ldv_kzalloc_9_#t~ret140; [L1424] ldv_kzalloc_9_#res := ldv_kzalloc_9_~tmp~19; [L1086] #t~ret86 := ldv_kzalloc_9_#res; [L1086] ~tmp~10 := #t~ret86; [L1086] havoc #t~ret86; [L1087] ~hwmon~1 := ~tmp~10; VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res!base=5019, ldv_kzalloc_9_#res!offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19!base=5019, ldv_kzalloc_9_~tmp~19!offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res!base=5019, ldv_zalloc_#res!offset=0, ldv_zalloc_#t~malloc32!base=5019, ldv_zalloc_#t~malloc32!offset=0, ldv_zalloc_~p~1!base=5019, ldv_zalloc_~p~1!offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1!base=5019, ldv_zalloc_~tmp~1!offset=0, old(~ldv_count_2~0)=0, ~#__key~0!base=52, ~#__key~0!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~dev!base=18446744073709551615, ~dev!offset=0, ~hwmon~1!base=5019, ~hwmon~1!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2!base=12376, ~pdata~2!offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0, ~tmp~10!base=5019, ~tmp~10!offset=0] [L1088] COND FALSE !(0 == (~hwmon~1!base + ~hwmon~1!offset) % 18446744073709551616) [L1094] platform_set_drvdata_#in~pdev, platform_set_drvdata_#in~data := ~dev, ~hwmon~1; [L1094] havoc platform_set_drvdata_~pdev, platform_set_drvdata_~data; [L909-L917] platform_set_drvdata_~pdev := platform_set_drvdata_#in~pdev; [L909-L917] platform_set_drvdata_~data := platform_set_drvdata_#in~data; [L914] FCALL call dev_set_drvdata({ base: platform_set_drvdata_~pdev!base, offset: 12 + platform_set_drvdata_~pdev!offset }, platform_set_drvdata_~data); [L1095] FCALL call __mutex_init({ base: ~hwmon~1!base, offset: ~hwmon~1!offset }, #t~string89, ~#__key~0); [L1096-L1098] FCALL call #t~ret90 := s3c_adc_register(~dev, { base: 0, offset: 0 }, { base: 0, offset: 0 }, 0); [L1096-L1098] FCALL call write~$Pointer$(#t~ret90, { base: ~hwmon~1!base, offset: 152 + ~hwmon~1!offset }, 8); [L1096-L1098] havoc #t~ret90; [L1099] FCALL call #t~mem91 := read~$Pointer$({ base: ~hwmon~1!base, offset: 152 + ~hwmon~1!offset }, 8); VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem91!base=18446744073709551616, #t~mem91!offset=-18446744073709551616, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res!base=5019, ldv_kzalloc_9_#res!offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19!base=5019, ldv_kzalloc_9_~tmp~19!offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res!base=5019, ldv_zalloc_#res!offset=0, ldv_zalloc_#t~malloc32!base=5019, ldv_zalloc_#t~malloc32!offset=0, ldv_zalloc_~p~1!base=5019, ldv_zalloc_~p~1!offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1!base=5019, ldv_zalloc_~tmp~1!offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data!base=5019, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=18446744073709551615, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=5019, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=18446744073709551615, platform_set_drvdata_~pdev!offset=0, ~#__key~0!base=52, ~#__key~0!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~dev!base=18446744073709551615, ~dev!offset=0, ~hwmon~1!base=5019, ~hwmon~1!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2!base=12376, ~pdata~2!offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0, ~tmp~10!base=5019, ~tmp~10!offset=0] [L1099] CALL call #t~ret92 := IS_ERR(#t~mem91); VAL [#in~ptr!base=18446744073709551616, #in~ptr!offset=-18446744073709551616, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1391-L1399] ~ptr := #in~ptr; [L1393] havoc ~tmp~16; VAL [#in~ptr!base=18446744073709551616, #in~ptr!offset=-18446744073709551616, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ptr!base=18446744073709551616, ~ptr!offset=-18446744073709551616, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1396] CALL call #t~ret137 := ldv_is_err(~ptr); VAL [#in~ptr!base=18446744073709551616, #in~ptr!offset=-18446744073709551616, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1452-L1459] ~ptr := #in~ptr; [L1457] #res := (if 0 == (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0) then 0 else 1); [L1396] RET call #t~ret137 := ldv_is_err(~ptr); VAL [#in~ptr!base=18446744073709551616, #in~ptr!offset=-18446744073709551616, #NULL!base=0, #NULL!offset=0, #t~ret137=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ptr!base=18446744073709551616, ~ptr!offset=-18446744073709551616, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1396] ~tmp~16 := #t~ret137; [L1396] havoc #t~ret137; [L1397] #res := ~tmp~16 % 256; [L1099] RET call #t~ret92 := IS_ERR(#t~mem91); VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem91!base=18446744073709551616, #t~mem91!offset=-18446744073709551616, #t~ret92=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res!base=5019, ldv_kzalloc_9_#res!offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19!base=5019, ldv_kzalloc_9_~tmp~19!offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res!base=5019, ldv_zalloc_#res!offset=0, ldv_zalloc_#t~malloc32!base=5019, ldv_zalloc_#t~malloc32!offset=0, ldv_zalloc_~p~1!base=5019, ldv_zalloc_~p~1!offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1!base=5019, ldv_zalloc_~tmp~1!offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data!base=5019, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=18446744073709551615, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=5019, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=18446744073709551615, platform_set_drvdata_~pdev!offset=0, ~#__key~0!base=52, ~#__key~0!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~dev!base=18446744073709551615, ~dev!offset=0, ~hwmon~1!base=5019, ~hwmon~1!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2!base=12376, ~pdata~2!offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0, ~tmp~10!base=5019, ~tmp~10!offset=0] [L1099] assume -9223372036854775808 <= #t~ret92 && #t~ret92 <= 9223372036854775807; [L1099] ~tmp___1~0 := #t~ret92; [L1099] havoc #t~ret92; [L1099] havoc #t~mem91; VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res!base=5019, ldv_kzalloc_9_#res!offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19!base=5019, ldv_kzalloc_9_~tmp~19!offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res!base=5019, ldv_zalloc_#res!offset=0, ldv_zalloc_#t~malloc32!base=5019, ldv_zalloc_#t~malloc32!offset=0, ldv_zalloc_~p~1!base=5019, ldv_zalloc_~p~1!offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1!base=5019, ldv_zalloc_~tmp~1!offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data!base=5019, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=18446744073709551615, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=5019, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=18446744073709551615, platform_set_drvdata_~pdev!offset=0, ~#__key~0!base=52, ~#__key~0!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~dev!base=18446744073709551615, ~dev!offset=0, ~hwmon~1!base=5019, ~hwmon~1!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2!base=12376, ~pdata~2!offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0, ~tmp___1~0=0, ~tmp~10!base=5019, ~tmp~10!offset=0] [L1100] COND FALSE !(0 != ~tmp___1~0) [L1108] s3c_hwmon_add_raw_#in~dev := { base: ~dev!base, offset: 12 + ~dev!offset }; [L1108] havoc s3c_hwmon_add_raw_#res; [L1108] havoc s3c_hwmon_add_raw_~dev; [L944-L951] s3c_hwmon_add_raw_~dev := s3c_hwmon_add_raw_#in~dev; [L949] s3c_hwmon_add_raw_#res := 0; [L1108] #t~ret97 := s3c_hwmon_add_raw_#res; [L1108] assume -2147483648 <= #t~ret97 && #t~ret97 <= 2147483647; [L1108] ~ret~3 := #t~ret97; [L1108] havoc #t~ret97; VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res!base=5019, ldv_kzalloc_9_#res!offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19!base=5019, ldv_kzalloc_9_~tmp~19!offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res!base=5019, ldv_zalloc_#res!offset=0, ldv_zalloc_#t~malloc32!base=5019, ldv_zalloc_#t~malloc32!offset=0, ldv_zalloc_~p~1!base=5019, ldv_zalloc_~p~1!offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1!base=5019, ldv_zalloc_~tmp~1!offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data!base=5019, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=18446744073709551615, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=5019, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=18446744073709551615, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_add_raw_#in~dev!base=18446744073709551615, s3c_hwmon_add_raw_#in~dev!offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev!base=18446744073709551615, s3c_hwmon_add_raw_~dev!offset=12, ~#__key~0!base=52, ~#__key~0!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~dev!base=18446744073709551615, ~dev!offset=0, ~hwmon~1!base=5019, ~hwmon~1!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2!base=12376, ~pdata~2!offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0, ~tmp___1~0=0, ~tmp~10!base=5019, ~tmp~10!offset=0] [L1109] COND FALSE !(0 != ~ret~3) [L1114] FCALL call #t~ret98 := hwmon_device_register({ base: ~dev!base, offset: 12 + ~dev!offset }); [L1114] FCALL call write~$Pointer$(#t~ret98, { base: ~hwmon~1!base, offset: 160 + ~hwmon~1!offset }, 8); [L1114] havoc #t~ret98; [L1115] FCALL call #t~mem99 := read~$Pointer$({ base: ~hwmon~1!base, offset: 160 + ~hwmon~1!offset }, 8); VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem99!base=9223372036854775808, #t~mem99!offset=27670116110564327424, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res!base=5019, ldv_kzalloc_9_#res!offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19!base=5019, ldv_kzalloc_9_~tmp~19!offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res!base=5019, ldv_zalloc_#res!offset=0, ldv_zalloc_#t~malloc32!base=5019, ldv_zalloc_#t~malloc32!offset=0, ldv_zalloc_~p~1!base=5019, ldv_zalloc_~p~1!offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1!base=5019, ldv_zalloc_~tmp~1!offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data!base=5019, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=18446744073709551615, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=5019, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=18446744073709551615, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_add_raw_#in~dev!base=18446744073709551615, s3c_hwmon_add_raw_#in~dev!offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev!base=18446744073709551615, s3c_hwmon_add_raw_~dev!offset=12, ~#__key~0!base=52, ~#__key~0!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~dev!base=18446744073709551615, ~dev!offset=0, ~hwmon~1!base=5019, ~hwmon~1!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2!base=12376, ~pdata~2!offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0, ~tmp___1~0=0, ~tmp~10!base=5019, ~tmp~10!offset=0] [L1115] CALL call #t~ret100 := IS_ERR(#t~mem99); VAL [#in~ptr!base=9223372036854775808, #in~ptr!offset=27670116110564327424, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1391-L1399] ~ptr := #in~ptr; [L1393] havoc ~tmp~16; VAL [#in~ptr!base=9223372036854775808, #in~ptr!offset=27670116110564327424, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ptr!base=9223372036854775808, ~ptr!offset=27670116110564327424, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1396] CALL call #t~ret137 := ldv_is_err(~ptr); VAL [#in~ptr!base=9223372036854775808, #in~ptr!offset=27670116110564327424, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1452-L1459] ~ptr := #in~ptr; [L1457] #res := (if 0 == (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0) then 0 else 1); [L1396] RET call #t~ret137 := ldv_is_err(~ptr); VAL [#in~ptr!base=9223372036854775808, #in~ptr!offset=27670116110564327424, #NULL!base=0, #NULL!offset=0, #t~ret137=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ptr!base=9223372036854775808, ~ptr!offset=27670116110564327424, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1396] ~tmp~16 := #t~ret137; [L1396] havoc #t~ret137; [L1397] #res := ~tmp~16 % 256; [L1115] RET call #t~ret100 := IS_ERR(#t~mem99); VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem99!base=9223372036854775808, #t~mem99!offset=27670116110564327424, #t~ret100=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res!base=5019, ldv_kzalloc_9_#res!offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19!base=5019, ldv_kzalloc_9_~tmp~19!offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res!base=5019, ldv_zalloc_#res!offset=0, ldv_zalloc_#t~malloc32!base=5019, ldv_zalloc_#t~malloc32!offset=0, ldv_zalloc_~p~1!base=5019, ldv_zalloc_~p~1!offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1!base=5019, ldv_zalloc_~tmp~1!offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data!base=5019, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=18446744073709551615, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=5019, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=18446744073709551615, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_add_raw_#in~dev!base=18446744073709551615, s3c_hwmon_add_raw_#in~dev!offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev!base=18446744073709551615, s3c_hwmon_add_raw_~dev!offset=12, ~#__key~0!base=52, ~#__key~0!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~dev!base=18446744073709551615, ~dev!offset=0, ~hwmon~1!base=5019, ~hwmon~1!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2!base=12376, ~pdata~2!offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0, ~tmp___1~0=0, ~tmp~10!base=5019, ~tmp~10!offset=0] [L1115] assume -9223372036854775808 <= #t~ret100 && #t~ret100 <= 9223372036854775807; [L1115] ~tmp___3~0 := #t~ret100; [L1115] havoc #t~mem99; [L1115] havoc #t~ret100; VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res!base=5019, ldv_kzalloc_9_#res!offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19!base=5019, ldv_kzalloc_9_~tmp~19!offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res!base=5019, ldv_zalloc_#res!offset=0, ldv_zalloc_#t~malloc32!base=5019, ldv_zalloc_#t~malloc32!offset=0, ldv_zalloc_~p~1!base=5019, ldv_zalloc_~p~1!offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1!base=5019, ldv_zalloc_~tmp~1!offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data!base=5019, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=18446744073709551615, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=5019, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=18446744073709551615, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_add_raw_#in~dev!base=18446744073709551615, s3c_hwmon_add_raw_#in~dev!offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev!base=18446744073709551615, s3c_hwmon_add_raw_~dev!offset=12, ~#__key~0!base=52, ~#__key~0!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~dev!base=18446744073709551615, ~dev!offset=0, ~hwmon~1!base=5019, ~hwmon~1!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2!base=12376, ~pdata~2!offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0, ~tmp___1~0=0, ~tmp___3~0=0, ~tmp~10!base=5019, ~tmp~10!offset=0] [L1116] COND FALSE !(0 != ~tmp___3~0) [L1124] ~i~0 := 0; VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res!base=5019, ldv_kzalloc_9_#res!offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19!base=5019, ldv_kzalloc_9_~tmp~19!offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res!base=5019, ldv_zalloc_#res!offset=0, ldv_zalloc_#t~malloc32!base=5019, ldv_zalloc_#t~malloc32!offset=0, ldv_zalloc_~p~1!base=5019, ldv_zalloc_~p~1!offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1!base=5019, ldv_zalloc_~tmp~1!offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data!base=5019, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=18446744073709551615, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=5019, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=18446744073709551615, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_add_raw_#in~dev!base=18446744073709551615, s3c_hwmon_add_raw_#in~dev!offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev!base=18446744073709551615, s3c_hwmon_add_raw_~dev!offset=12, ~#__key~0!base=52, ~#__key~0!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~dev!base=18446744073709551615, ~dev!offset=0, ~hwmon~1!base=5019, ~hwmon~1!offset=0, ~i~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2!base=12376, ~pdata~2!offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0, ~tmp___1~0=0, ~tmp___3~0=0, ~tmp~10!base=5019, ~tmp~10!offset=0] [L1169] COND TRUE ~i~0 % 4294967296 <= 7 [L1127] FCALL call #t~mem105 := read~$Pointer$({ base: ~pdata~2!base, offset: ~pdata~2!offset + 8 * ~i~0 }, 8); [L1127] ~cfg~2 := #t~mem105; [L1127] havoc #t~mem105; VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res!base=5019, ldv_kzalloc_9_#res!offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19!base=5019, ldv_kzalloc_9_~tmp~19!offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res!base=5019, ldv_zalloc_#res!offset=0, ldv_zalloc_#t~malloc32!base=5019, ldv_zalloc_#t~malloc32!offset=0, ldv_zalloc_~p~1!base=5019, ldv_zalloc_~p~1!offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1!base=5019, ldv_zalloc_~tmp~1!offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data!base=5019, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=18446744073709551615, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=5019, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=18446744073709551615, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_add_raw_#in~dev!base=18446744073709551615, s3c_hwmon_add_raw_#in~dev!offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev!base=18446744073709551615, s3c_hwmon_add_raw_~dev!offset=12, ~#__key~0!base=52, ~#__key~0!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~cfg~2!base=18446744073709548820, ~cfg~2!offset=148, ~dev!base=18446744073709551615, ~dev!offset=0, ~hwmon~1!base=5019, ~hwmon~1!offset=0, ~i~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2!base=12376, ~pdata~2!offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0, ~tmp___1~0=0, ~tmp___3~0=0, ~tmp~10!base=5019, ~tmp~10!offset=0] [L1128] COND FALSE !(0 == (~cfg~2!base + ~cfg~2!offset) % 18446744073709551616) [L1133] FCALL call #t~mem106 := read~int({ base: ~cfg~2!base, offset: 8 + ~cfg~2!offset }, 4); [L1133] COND FALSE !(#t~mem106 % 4294967296 > 65535) [L1133] havoc #t~mem106; [L1139] FCALL call #t~mem109 := read~int({ base: ~cfg~2!base, offset: 12 + ~cfg~2!offset }, 4); VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem109=25778393710593, #t~nondet107=68, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res!base=5019, ldv_kzalloc_9_#res!offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19!base=5019, ldv_kzalloc_9_~tmp~19!offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res!base=5019, ldv_zalloc_#res!offset=0, ldv_zalloc_#t~malloc32!base=5019, ldv_zalloc_#t~malloc32!offset=0, ldv_zalloc_~p~1!base=5019, ldv_zalloc_~p~1!offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1!base=5019, ldv_zalloc_~tmp~1!offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data!base=5019, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=18446744073709551615, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=5019, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=18446744073709551615, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_add_raw_#in~dev!base=18446744073709551615, s3c_hwmon_add_raw_#in~dev!offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev!base=18446744073709551615, s3c_hwmon_add_raw_~dev!offset=12, ~#__key~0!base=52, ~#__key~0!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~cfg~2!base=18446744073709548820, ~cfg~2!offset=148, ~dev!base=18446744073709551615, ~dev!offset=0, ~hwmon~1!base=5019, ~hwmon~1!offset=0, ~i~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2!base=12376, ~pdata~2!offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0, ~tmp___1~0=0, ~tmp___3~0=0, ~tmp~10!base=5019, ~tmp~10!offset=0] [L1139] COND FALSE !(0 == #t~mem109 % 4294967296) [L1139] havoc #t~mem109; [L1145] FCALL call #t~mem112 := read~$Pointer$({ base: ~pdata~2!base, offset: ~pdata~2!offset + 8 * ~i~0 }, 8); [L1145-L1146] s3c_hwmon_create_attr_#in~dev, s3c_hwmon_create_attr_#in~cfg, s3c_hwmon_create_attr_#in~attrs, s3c_hwmon_create_attr_#in~channel := { base: ~dev!base, offset: 12 + ~dev!offset }, #t~mem112, { base: ~hwmon~1!base, offset: 168 + ~hwmon~1!offset + 116 * (~i~0 % 4294967296) }, ~i~0; [L1145-L1146] havoc s3c_hwmon_create_attr_#res; [L1145-L1146] havoc s3c_hwmon_create_attr_#t~nondet72, s3c_hwmon_create_attr_#t~ret74, s3c_hwmon_create_attr_#t~nondet75, s3c_hwmon_create_attr_#t~mem77, s3c_hwmon_create_attr_#t~nondet78, s3c_hwmon_create_attr_#t~ret80, s3c_hwmon_create_attr_#t~nondet81, s3c_hwmon_create_attr_~dev, s3c_hwmon_create_attr_~cfg, s3c_hwmon_create_attr_~attrs, s3c_hwmon_create_attr_~channel, s3c_hwmon_create_attr_~attr~0, s3c_hwmon_create_attr_~ret~2; [L1013-L1052] s3c_hwmon_create_attr_~dev := s3c_hwmon_create_attr_#in~dev; [L1013-L1052] s3c_hwmon_create_attr_~cfg := s3c_hwmon_create_attr_#in~cfg; [L1013-L1052] s3c_hwmon_create_attr_~attrs := s3c_hwmon_create_attr_#in~attrs; [L1013-L1052] s3c_hwmon_create_attr_~channel := s3c_hwmon_create_attr_#in~channel; [L1016] havoc s3c_hwmon_create_attr_~attr~0; [L1017] havoc s3c_hwmon_create_attr_~ret~2; [L1020] havoc s3c_hwmon_create_attr_#t~nondet72; [L1021] s3c_hwmon_create_attr_~attr~0 := { base: s3c_hwmon_create_attr_~attrs!base, offset: s3c_hwmon_create_attr_~attrs!offset }; [L1022] FCALL call write~int(s3c_hwmon_create_attr_~channel, { base: s3c_hwmon_create_attr_~attr~0!base, offset: 42 + s3c_hwmon_create_attr_~attr~0!offset }, 4); [L1023] FCALL call write~$Pointer$({ base: s3c_hwmon_create_attr_~attrs!base, offset: 92 + s3c_hwmon_create_attr_~attrs!offset }, { base: s3c_hwmon_create_attr_~attr~0!base, offset: s3c_hwmon_create_attr_~attr~0!offset }, 8); [L1024] FCALL call write~int(292, { base: s3c_hwmon_create_attr_~attr~0!base, offset: 8 + s3c_hwmon_create_attr_~attr~0!offset }, 2); [L1025] FCALL call write~$Pointer$(#funAddr~s3c_hwmon_ch_show, { base: s3c_hwmon_create_attr_~attr~0!base, offset: 26 + s3c_hwmon_create_attr_~attr~0!offset }, 8); [L1026] ldv_device_create_file_7_#in~ldv_func_arg1, ldv_device_create_file_7_#in~ldv_func_arg2 := s3c_hwmon_create_attr_~dev, { base: s3c_hwmon_create_attr_~attr~0!base, offset: s3c_hwmon_create_attr_~attr~0!offset }; [L1026] havoc ldv_device_create_file_7_#res; [L1026] havoc ldv_device_create_file_7_#t~ret138, ldv_device_create_file_7_~ldv_func_arg1, ldv_device_create_file_7_~ldv_func_arg2, ldv_device_create_file_7_~tmp~17; [L1400-L1408] ldv_device_create_file_7_~ldv_func_arg1 := ldv_device_create_file_7_#in~ldv_func_arg1; [L1400-L1408] ldv_device_create_file_7_~ldv_func_arg2 := ldv_device_create_file_7_#in~ldv_func_arg2; [L1402] havoc ldv_device_create_file_7_~tmp~17; VAL [#in~dev!base=18446744073709551615, #in~dev!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem112!base=18446744073709548820, #t~mem112!offset=148, #t~nondet107=68, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ldv_device_create_file_7_#in~ldv_func_arg1!base=18446744073709551615, ldv_device_create_file_7_#in~ldv_func_arg1!offset=12, ldv_device_create_file_7_#in~ldv_func_arg2!base=5019, ldv_device_create_file_7_#in~ldv_func_arg2!offset=168, ldv_device_create_file_7_~ldv_func_arg1!base=18446744073709551615, ldv_device_create_file_7_~ldv_func_arg1!offset=12, ldv_device_create_file_7_~ldv_func_arg2!base=5019, ldv_device_create_file_7_~ldv_func_arg2!offset=168, ldv_kzalloc_9_#in~flags=208, ldv_kzalloc_9_#in~size=800, ldv_kzalloc_9_#res!base=5019, ldv_kzalloc_9_#res!offset=0, ldv_kzalloc_9_~flags=208, ldv_kzalloc_9_~size=800, ldv_kzalloc_9_~tmp~19!base=5019, ldv_kzalloc_9_~tmp~19!offset=0, ldv_zalloc_#in~size=800, ldv_zalloc_#res!base=5019, ldv_zalloc_#res!offset=0, ldv_zalloc_#t~malloc32!base=5019, ldv_zalloc_#t~malloc32!offset=0, ldv_zalloc_~p~1!base=5019, ldv_zalloc_~p~1!offset=0, ldv_zalloc_~size=800, ldv_zalloc_~tmp___0~1=0, ldv_zalloc_~tmp~1!base=5019, ldv_zalloc_~tmp~1!offset=0, old(~ldv_count_2~0)=0, platform_set_drvdata_#in~data!base=5019, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=18446744073709551615, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=5019, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=18446744073709551615, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_add_raw_#in~dev!base=18446744073709551615, s3c_hwmon_add_raw_#in~dev!offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev!base=18446744073709551615, s3c_hwmon_add_raw_~dev!offset=12, s3c_hwmon_create_attr_#in~attrs!base=5019, s3c_hwmon_create_attr_#in~attrs!offset=168, s3c_hwmon_create_attr_#in~cfg!base=18446744073709548820, s3c_hwmon_create_attr_#in~cfg!offset=148, s3c_hwmon_create_attr_#in~channel=0, s3c_hwmon_create_attr_#in~dev!base=18446744073709551615, s3c_hwmon_create_attr_#in~dev!offset=12, s3c_hwmon_create_attr_~attrs!base=5019, s3c_hwmon_create_attr_~attrs!offset=168, s3c_hwmon_create_attr_~attr~0!base=5019, s3c_hwmon_create_attr_~attr~0!offset=168, s3c_hwmon_create_attr_~cfg!base=18446744073709548820, s3c_hwmon_create_attr_~cfg!offset=148, s3c_hwmon_create_attr_~channel=0, s3c_hwmon_create_attr_~dev!base=18446744073709551615, s3c_hwmon_create_attr_~dev!offset=12, ~#__key~0!base=52, ~#__key~0!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~cfg~2!base=18446744073709548820, ~cfg~2!offset=148, ~dev!base=18446744073709551615, ~dev!offset=0, ~hwmon~1!base=5019, ~hwmon~1!offset=0, ~i~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~pdata~2!base=12376, ~pdata~2!offset=-143312754708649506517079, ~probed_1~0=0, ~ref_cnt~0=0, ~ret~3=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0, ~tmp___1~0=0, ~tmp___3~0=0, ~tmp~10!base=5019, ~tmp~10!offset=0] [L1405] CALL call ldv_device_create_file_7_#t~ret138 := ldv_device_create_file(); VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1508] havoc ~nondetermined~0; [L1509] havoc ~tmp~22; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1512] CALL call #t~ret143 := ldv_undef_int(); VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L854] havoc ~tmp~4; [L857] assume -2147483648 <= #t~nondet35 && #t~nondet35 <= 2147483647; [L857] ~tmp~4 := #t~nondet35; [L857] havoc #t~nondet35; [L858] #res := ~tmp~4; [L1512] RET call #t~ret143 := ldv_undef_int(); VAL [#NULL!base=0, #NULL!offset=0, #t~ret143=-1, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1512] assume -2147483648 <= #t~ret143 && #t~ret143 <= 2147483647; [L1512] ~nondetermined~0 := #t~ret143; [L1512] havoc #t~ret143; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~nondetermined~0=-1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1513] COND TRUE 0 != ~nondetermined~0 [L1514] ~ldv_count_2~0 := 1 + ~ldv_count_2~0; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~nondetermined~0=-1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1515] COND TRUE ~ldv_count_1~0 < ~ldv_count_2~0 VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~nondetermined~0=-1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1433] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~nondetermined~0=-1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L938] FCALL call #t~string52 := #Ultimate.alloc(4); [L938] FCALL call write~init~int(60, { base: #t~string52!base, offset: #t~string52!offset }, 1); [L938] FCALL call write~init~int(55, { base: #t~string52!base, offset: 1 + #t~string52!offset }, 1); [L938] FCALL call write~init~int(62, { base: #t~string52!base, offset: 2 + #t~string52!offset }, 1); [L938] FCALL call write~init~int(0, { base: #t~string52!base, offset: 3 + #t~string52!offset }, 1); [L938] FCALL call #t~string53 := #Ultimate.alloc(20); [L991] FCALL call #t~string65 := #Ultimate.alloc(4); [L991] FCALL call write~init~int(37, { base: #t~string65!base, offset: #t~string65!offset }, 1); [L991] FCALL call write~init~int(100, { base: #t~string65!base, offset: 1 + #t~string65!offset }, 1); [L991] FCALL call write~init~int(10, { base: #t~string65!base, offset: 2 + #t~string65!offset }, 1); [L991] FCALL call write~init~int(0, { base: #t~string65!base, offset: 3 + #t~string65!offset }, 1); [L1009] FCALL call #t~string70 := #Ultimate.alloc(4); [L1009] FCALL call write~init~int(37, { base: #t~string70!base, offset: #t~string70!offset }, 1); [L1009] FCALL call write~init~int(115, { base: #t~string70!base, offset: 1 + #t~string70!offset }, 1); [L1009] FCALL call write~init~int(10, { base: #t~string70!base, offset: 2 + #t~string70!offset }, 1); [L1009] FCALL call write~init~int(0, { base: #t~string70!base, offset: 3 + #t~string70!offset }, 1); [L1020] FCALL call #t~string73 := #Ultimate.alloc(11); [L1028] FCALL call #t~string76 := #Ultimate.alloc(34); [L1034] FCALL call #t~string79 := #Ultimate.alloc(11); [L1043] FCALL call #t~string82 := #Ultimate.alloc(34); [L1081] FCALL call #t~string85 := #Ultimate.alloc(27); [L1089] FCALL call #t~string88 := #Ultimate.alloc(11); [L1095] FCALL call #t~string89 := #Ultimate.alloc(13); [L1101] FCALL call #t~string94 := #Ultimate.alloc(21); [L1117] FCALL call #t~string102 := #Ultimate.alloc(30); [L1134] FCALL call #t~string108 := #Ultimate.alloc(33); [L1140] FCALL call #t~string111 := #Ultimate.alloc(25); [L1148] FCALL call #t~string115 := #Ultimate.alloc(27); [L1213] FCALL call #t~string121 := #Ultimate.alloc(10); [L888] ~LDV_IN_INTERRUPT~0 := 1; [L889] ~ref_cnt~0 := 0; [L890] ~ldv_state_variable_1~0 := 0; [L892] ~probed_1~0 := 0; [L893] ~ldv_state_variable_0~0 := 0; [L1234] ~ldv_retval_0~0 := 0; [L1235] ~ldv_retval_1~0 := 0; [L1238] ~ldv_retval_2~0 := 0; [L1495] ~ldv_count_1~0 := 0; [L1496] ~ldv_count_2~0 := 0; [L891] ~s3c_hwmon_driver_group1~0 := { base: 0, offset: 0 }; [L1213-L1215] FCALL call ~#s3c_hwmon_driver~0 := #Ultimate.alloc(153); [L1213-L1215] FCALL call write~init~$Pointer$(#funAddr~s3c_hwmon_probe, { base: ~#s3c_hwmon_driver~0!base, offset: ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$(#funAddr~s3c_hwmon_remove, { base: ~#s3c_hwmon_driver~0!base, offset: 8 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 16 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 24 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 32 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$(#t~string121, { base: ~#s3c_hwmon_driver~0!base, offset: 40 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 48 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#s3c_hwmon_driver~0!base, offset: 56 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 64 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~int(0, { base: ~#s3c_hwmon_driver~0!base, offset: 72 + ~#s3c_hwmon_driver~0!offset }, 1); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 73 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 81 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 89 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 97 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 105 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 113 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 121 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 129 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 137 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 145 + ~#s3c_hwmon_driver~0!offset }, 8); [L1267] havoc ~tmp~14; [L1268] havoc ~tmp___0~4; [L1269] havoc ~tmp___1~1; [L1273] ~ldv_state_variable_1~0 := 0; [L1274] ~ref_cnt~0 := 0; [L1275] ~ldv_state_variable_0~0 := 1; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=0, ~s3c_hwmon_driver_group1~0!offset=0] [L1277] assume -2147483648 <= #t~nondet126 && #t~nondet126 <= 2147483647; [L1277] ~tmp~14 := #t~nondet126; [L1277] havoc #t~nondet126; [L1279] #t~switch127 := 0 == ~tmp~14; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=0, ~s3c_hwmon_driver_group1~0!offset=0] [L1278-L1374] COND FALSE !(#t~switch127) [L1331] #t~switch127 := #t~switch127 || 1 == ~tmp~14; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=0, ~s3c_hwmon_driver_group1~0!offset=0] [L1278-L1374] COND TRUE #t~switch127 VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=0, ~s3c_hwmon_driver_group1~0!offset=0] [L1332] COND TRUE 0 != ~ldv_state_variable_0~0 [L1333] assume -2147483648 <= #t~nondet133 && #t~nondet133 <= 2147483647; [L1333] ~tmp___1~1 := #t~nondet133; [L1333] havoc #t~nondet133; [L1335] #t~switch134 := 0 == ~tmp___1~1; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=0, ~s3c_hwmon_driver_group1~0!offset=0] [L1334-L1366] COND FALSE !(#t~switch134) [L1344] #t~switch134 := #t~switch134 || 1 == ~tmp___1~1; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=0, ~s3c_hwmon_driver_group1~0!offset=0] [L1334-L1366] COND TRUE #t~switch134 VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=0, ~s3c_hwmon_driver_group1~0!offset=0] [L1345] COND TRUE 1 == ~ldv_state_variable_0~0 [L1218] havoc ~tmp~12; [L1221] FCALL call #t~ret122 := platform_driver_register(~#s3c_hwmon_driver~0); [L1221] assume -2147483648 <= #t~ret122 && #t~ret122 <= 2147483647; [L1221] ~tmp~12 := #t~ret122; [L1221] havoc #t~ret122; [L1222] #res := ~tmp~12; [L1346] assume -2147483648 <= #t~ret135 && #t~ret135 <= 2147483647; [L1346] ~ldv_retval_2~0 := #t~ret135; [L1346] havoc #t~ret135; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=0, ~s3c_hwmon_driver_group1~0!offset=0] [L1347] COND FALSE !(0 != ~ldv_retval_2~0) [L1353] COND TRUE 0 == ~ldv_retval_2~0 [L1354] ~ldv_state_variable_0~0 := 2; [L1355] ~ldv_state_variable_1~0 := 1; [L1256] havoc ~tmp~13; [L795-L812] ~size := #in~size; [L797] havoc ~p~0; [L798] havoc ~tmp~0; [L799] havoc ~tmp___0~0; [L802] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; [L802] ~tmp___0~0 := #t~nondet29; [L802] havoc #t~nondet29; [L803] COND FALSE !(0 != ~tmp___0~0) [L806] FCALL call #t~malloc30 := #Ultimate.alloc(~size); [L806] ~tmp~0 := #t~malloc30; [L807] ~p~0 := ~tmp~0; [L808] assume 0 != (if 0 != (~p~0!base + ~p~0!offset) % 18446744073709551616 then 1 else 0); [L809] #res := ~p~0; [L1259] ~tmp~13 := #t~ret125; [L1259] havoc #t~ret125; [L1260] assume 0 != (if 0 != (~tmp~13!base + ~tmp~13!offset) % 18446744073709551616 then 1 else 0); [L1261] ~s3c_hwmon_driver_group1~0 := ~tmp~13; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1277] assume -2147483648 <= #t~nondet126 && #t~nondet126 <= 2147483647; [L1277] ~tmp~14 := #t~nondet126; [L1277] havoc #t~nondet126; [L1279] #t~switch127 := 0 == ~tmp~14; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1278-L1374] COND TRUE #t~switch127 VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1280] COND TRUE 0 != ~ldv_state_variable_1~0 [L1281] assume -2147483648 <= #t~nondet128 && #t~nondet128 <= 2147483647; [L1281] ~tmp___0~4 := #t~nondet128; [L1281] havoc #t~nondet128; [L1283] #t~switch129 := 0 == ~tmp___0~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1282-L1325] COND TRUE #t~switch129 VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1284] COND TRUE 1 == ~ldv_state_variable_1~0 VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1285] CALL call #t~ret130 := s3c_hwmon_probe(~s3c_hwmon_driver_group1~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1063-L1186] ~dev := #in~dev; [L1065] havoc ~pdata~2; [L1066] havoc ~hwmon~1; [L1067] havoc ~ret~3; [L1068] havoc ~i~0; [L1069] havoc ~tmp~10; [L1070] FCALL call ~#__key~0 := #Ultimate.alloc(8); [L1071] havoc ~tmp___0~3; [L1072] havoc ~tmp___1~0; [L1073] havoc ~tmp___2~0; [L1074] havoc ~tmp___3~0; [L1075] havoc ~cfg~2; [L1078] FCALL call #t~mem83 := read~$Pointer$({ base: ~dev!base, offset: 277 + ~dev!offset }, 8); [L1078] ~pdata~2 := #t~mem83; [L1078] havoc #t~mem83; [L1079] ~ret~3 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1080] COND FALSE !(0 == (~pdata~2!base + ~pdata~2!offset) % 18446744073709551616) [L1418-L1426] ~size := #in~size; [L1418-L1426] ~flags := #in~flags; [L1420] havoc ~tmp~19; [L813-L830] ~size := #in~size; [L815] havoc ~p~1; [L816] havoc ~tmp~1; [L817] havoc ~tmp___0~1; [L820] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; [L820] ~tmp___0~1 := #t~nondet31; [L820] havoc #t~nondet31; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L821] COND FALSE !(0 != ~tmp___0~1) [L824] FCALL call #t~malloc32 := #Ultimate.alloc((if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296)); VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L824] CALL call #Ultimate.meminit(#t~malloc32, 1, (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296), (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296)); VAL [#amountOfFields=1, #NULL!base=0, #NULL!offset=0, #product=800, #ptr!base=5019, #ptr!offset=0, #sizeOfFields=800, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [?] #memory_int := ~initToZeroAtPointerBaseAddress~int(#memory_int, #ptr!base); [L824] RET call #Ultimate.meminit(#t~malloc32, 1, (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296), (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296)); VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L824] ~tmp~1 := #t~malloc32; [L825] ~p~1 := ~tmp~1; [L826] assume 0 != (if 0 != (~p~1!base + ~p~1!offset) % 18446744073709551616 then 1 else 0); [L827] #res := ~p~1; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1423] ~tmp~19 := #t~ret140; [L1423] havoc #t~ret140; [L1424] #res := ~tmp~19; [L1086] ~tmp~10 := #t~ret86; [L1086] havoc #t~ret86; [L1087] ~hwmon~1 := ~tmp~10; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1088] COND FALSE !(0 == (~hwmon~1!base + ~hwmon~1!offset) % 18446744073709551616) [L909-L917] ~pdev := #in~pdev; [L909-L917] ~data := #in~data; [L914] FCALL call dev_set_drvdata({ base: ~pdev!base, offset: 12 + ~pdev!offset }, ~data); [L1095] FCALL call __mutex_init({ base: ~hwmon~1!base, offset: ~hwmon~1!offset }, #t~string89, ~#__key~0); [L1096-L1098] FCALL call #t~ret90 := s3c_adc_register(~dev, { base: 0, offset: 0 }, { base: 0, offset: 0 }, 0); [L1096-L1098] FCALL call write~$Pointer$(#t~ret90, { base: ~hwmon~1!base, offset: 152 + ~hwmon~1!offset }, 8); [L1096-L1098] havoc #t~ret90; [L1099] FCALL call #t~mem91 := read~$Pointer$({ base: ~hwmon~1!base, offset: 152 + ~hwmon~1!offset }, 8); VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1099] CALL call #t~ret92 := IS_ERR(#t~mem91); VAL [#in~ptr!base=18446744073709551616, #in~ptr!offset=-18446744073709551616, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1391-L1399] ~ptr := #in~ptr; [L1393] havoc ~tmp~16; VAL [#in~ptr!base=18446744073709551616, #in~ptr!offset=-18446744073709551616, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ptr!base=18446744073709551616, ~ptr!offset=-18446744073709551616, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1396] CALL call #t~ret137 := ldv_is_err(~ptr); VAL [#in~ptr!base=18446744073709551616, #in~ptr!offset=-18446744073709551616, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1452-L1459] ~ptr := #in~ptr; [L1457] #res := (if 0 == (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0) then 0 else 1); [L1396] RET call #t~ret137 := ldv_is_err(~ptr); VAL [#in~ptr!base=18446744073709551616, #in~ptr!offset=-18446744073709551616, #NULL!base=0, #NULL!offset=0, #t~ret137=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ptr!base=18446744073709551616, ~ptr!offset=-18446744073709551616, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1396] ~tmp~16 := #t~ret137; [L1396] havoc #t~ret137; [L1397] #res := ~tmp~16 % 256; [L1099] RET call #t~ret92 := IS_ERR(#t~mem91); VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1099] assume -9223372036854775808 <= #t~ret92 && #t~ret92 <= 9223372036854775807; [L1099] ~tmp___1~0 := #t~ret92; [L1099] havoc #t~ret92; [L1099] havoc #t~mem91; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1100] COND FALSE !(0 != ~tmp___1~0) [L944-L951] ~dev := #in~dev; [L949] #res := 0; [L1108] assume -2147483648 <= #t~ret97 && #t~ret97 <= 2147483647; [L1108] ~ret~3 := #t~ret97; [L1108] havoc #t~ret97; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1109] COND FALSE !(0 != ~ret~3) [L1114] FCALL call #t~ret98 := hwmon_device_register({ base: ~dev!base, offset: 12 + ~dev!offset }); [L1114] FCALL call write~$Pointer$(#t~ret98, { base: ~hwmon~1!base, offset: 160 + ~hwmon~1!offset }, 8); [L1114] havoc #t~ret98; [L1115] FCALL call #t~mem99 := read~$Pointer$({ base: ~hwmon~1!base, offset: 160 + ~hwmon~1!offset }, 8); VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1115] CALL call #t~ret100 := IS_ERR(#t~mem99); VAL [#in~ptr!base=9223372036854775808, #in~ptr!offset=27670116110564327424, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1391-L1399] ~ptr := #in~ptr; [L1393] havoc ~tmp~16; VAL [#in~ptr!base=9223372036854775808, #in~ptr!offset=27670116110564327424, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ptr!base=9223372036854775808, ~ptr!offset=27670116110564327424, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1396] CALL call #t~ret137 := ldv_is_err(~ptr); VAL [#in~ptr!base=9223372036854775808, #in~ptr!offset=27670116110564327424, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1452-L1459] ~ptr := #in~ptr; [L1457] #res := (if 0 == (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0) then 0 else 1); [L1396] RET call #t~ret137 := ldv_is_err(~ptr); VAL [#in~ptr!base=9223372036854775808, #in~ptr!offset=27670116110564327424, #NULL!base=0, #NULL!offset=0, #t~ret137=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ptr!base=9223372036854775808, ~ptr!offset=27670116110564327424, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1396] ~tmp~16 := #t~ret137; [L1396] havoc #t~ret137; [L1397] #res := ~tmp~16 % 256; [L1115] RET call #t~ret100 := IS_ERR(#t~mem99); VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1115] assume -9223372036854775808 <= #t~ret100 && #t~ret100 <= 9223372036854775807; [L1115] ~tmp___3~0 := #t~ret100; [L1115] havoc #t~mem99; [L1115] havoc #t~ret100; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1116] COND FALSE !(0 != ~tmp___3~0) [L1124] ~i~0 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1169] COND TRUE ~i~0 % 4294967296 <= 7 [L1127] FCALL call #t~mem105 := read~$Pointer$({ base: ~pdata~2!base, offset: ~pdata~2!offset + 8 * ~i~0 }, 8); [L1127] ~cfg~2 := #t~mem105; [L1127] havoc #t~mem105; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1128] COND FALSE !(0 == (~cfg~2!base + ~cfg~2!offset) % 18446744073709551616) [L1133] FCALL call #t~mem106 := read~int({ base: ~cfg~2!base, offset: 8 + ~cfg~2!offset }, 4); [L1133] COND FALSE !(#t~mem106 % 4294967296 > 65535) [L1133] havoc #t~mem106; [L1139] FCALL call #t~mem109 := read~int({ base: ~cfg~2!base, offset: 12 + ~cfg~2!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1139] COND FALSE !(0 == #t~mem109 % 4294967296) [L1139] havoc #t~mem109; [L1145] FCALL call #t~mem112 := read~$Pointer$({ base: ~pdata~2!base, offset: ~pdata~2!offset + 8 * ~i~0 }, 8); [L1013-L1052] ~dev := #in~dev; [L1013-L1052] ~cfg := #in~cfg; [L1013-L1052] ~attrs := #in~attrs; [L1013-L1052] ~channel := #in~channel; [L1016] havoc ~attr~0; [L1017] havoc ~ret~2; [L1020] havoc #t~nondet72; [L1021] ~attr~0 := { base: ~attrs!base, offset: ~attrs!offset }; [L1022] FCALL call write~int(~channel, { base: ~attr~0!base, offset: 42 + ~attr~0!offset }, 4); [L1023] FCALL call write~$Pointer$({ base: ~attrs!base, offset: 92 + ~attrs!offset }, { base: ~attr~0!base, offset: ~attr~0!offset }, 8); [L1024] FCALL call write~int(292, { base: ~attr~0!base, offset: 8 + ~attr~0!offset }, 2); [L1025] FCALL call write~$Pointer$(#funAddr~s3c_hwmon_ch_show, { base: ~attr~0!base, offset: 26 + ~attr~0!offset }, 8); [L1400-L1408] ~ldv_func_arg1 := #in~ldv_func_arg1; [L1400-L1408] ~ldv_func_arg2 := #in~ldv_func_arg2; [L1402] havoc ~tmp~17; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1405] CALL call #t~ret138 := ldv_device_create_file(); VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1508] havoc ~nondetermined~0; [L1509] havoc ~tmp~22; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1512] CALL call #t~ret143 := ldv_undef_int(); VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L854] havoc ~tmp~4; [L857] assume -2147483648 <= #t~nondet35 && #t~nondet35 <= 2147483647; [L857] ~tmp~4 := #t~nondet35; [L857] havoc #t~nondet35; [L858] #res := ~tmp~4; [L1512] RET call #t~ret143 := ldv_undef_int(); VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1512] assume -2147483648 <= #t~ret143 && #t~ret143 <= 2147483647; [L1512] ~nondetermined~0 := #t~ret143; [L1512] havoc #t~ret143; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1513] COND TRUE 0 != ~nondetermined~0 [L1514] ~ldv_count_2~0 := 1 + ~ldv_count_2~0; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1515] COND TRUE ~ldv_count_1~0 < ~ldv_count_2~0 VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1433] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] ----- ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L938] FCALL call #t~string52 := #Ultimate.alloc(4); [L938] FCALL call write~init~int(60, { base: #t~string52!base, offset: #t~string52!offset }, 1); [L938] FCALL call write~init~int(55, { base: #t~string52!base, offset: 1 + #t~string52!offset }, 1); [L938] FCALL call write~init~int(62, { base: #t~string52!base, offset: 2 + #t~string52!offset }, 1); [L938] FCALL call write~init~int(0, { base: #t~string52!base, offset: 3 + #t~string52!offset }, 1); [L938] FCALL call #t~string53 := #Ultimate.alloc(20); [L991] FCALL call #t~string65 := #Ultimate.alloc(4); [L991] FCALL call write~init~int(37, { base: #t~string65!base, offset: #t~string65!offset }, 1); [L991] FCALL call write~init~int(100, { base: #t~string65!base, offset: 1 + #t~string65!offset }, 1); [L991] FCALL call write~init~int(10, { base: #t~string65!base, offset: 2 + #t~string65!offset }, 1); [L991] FCALL call write~init~int(0, { base: #t~string65!base, offset: 3 + #t~string65!offset }, 1); [L1009] FCALL call #t~string70 := #Ultimate.alloc(4); [L1009] FCALL call write~init~int(37, { base: #t~string70!base, offset: #t~string70!offset }, 1); [L1009] FCALL call write~init~int(115, { base: #t~string70!base, offset: 1 + #t~string70!offset }, 1); [L1009] FCALL call write~init~int(10, { base: #t~string70!base, offset: 2 + #t~string70!offset }, 1); [L1009] FCALL call write~init~int(0, { base: #t~string70!base, offset: 3 + #t~string70!offset }, 1); [L1020] FCALL call #t~string73 := #Ultimate.alloc(11); [L1028] FCALL call #t~string76 := #Ultimate.alloc(34); [L1034] FCALL call #t~string79 := #Ultimate.alloc(11); [L1043] FCALL call #t~string82 := #Ultimate.alloc(34); [L1081] FCALL call #t~string85 := #Ultimate.alloc(27); [L1089] FCALL call #t~string88 := #Ultimate.alloc(11); [L1095] FCALL call #t~string89 := #Ultimate.alloc(13); [L1101] FCALL call #t~string94 := #Ultimate.alloc(21); [L1117] FCALL call #t~string102 := #Ultimate.alloc(30); [L1134] FCALL call #t~string108 := #Ultimate.alloc(33); [L1140] FCALL call #t~string111 := #Ultimate.alloc(25); [L1148] FCALL call #t~string115 := #Ultimate.alloc(27); [L1213] FCALL call #t~string121 := #Ultimate.alloc(10); [L888] ~LDV_IN_INTERRUPT~0 := 1; [L889] ~ref_cnt~0 := 0; [L890] ~ldv_state_variable_1~0 := 0; [L892] ~probed_1~0 := 0; [L893] ~ldv_state_variable_0~0 := 0; [L1234] ~ldv_retval_0~0 := 0; [L1235] ~ldv_retval_1~0 := 0; [L1238] ~ldv_retval_2~0 := 0; [L1495] ~ldv_count_1~0 := 0; [L1496] ~ldv_count_2~0 := 0; [L891] ~s3c_hwmon_driver_group1~0 := { base: 0, offset: 0 }; [L1213-L1215] FCALL call ~#s3c_hwmon_driver~0 := #Ultimate.alloc(153); [L1213-L1215] FCALL call write~init~$Pointer$(#funAddr~s3c_hwmon_probe, { base: ~#s3c_hwmon_driver~0!base, offset: ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$(#funAddr~s3c_hwmon_remove, { base: ~#s3c_hwmon_driver~0!base, offset: 8 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 16 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 24 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 32 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$(#t~string121, { base: ~#s3c_hwmon_driver~0!base, offset: 40 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 48 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#s3c_hwmon_driver~0!base, offset: 56 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 64 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~int(0, { base: ~#s3c_hwmon_driver~0!base, offset: 72 + ~#s3c_hwmon_driver~0!offset }, 1); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 73 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 81 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 89 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 97 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 105 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 113 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 121 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 129 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 137 + ~#s3c_hwmon_driver~0!offset }, 8); [L1213-L1215] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 145 + ~#s3c_hwmon_driver~0!offset }, 8); [L1267] havoc ~tmp~14; [L1268] havoc ~tmp___0~4; [L1269] havoc ~tmp___1~1; [L1273] ~ldv_state_variable_1~0 := 0; [L1274] ~ref_cnt~0 := 0; [L1275] ~ldv_state_variable_0~0 := 1; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=0, ~s3c_hwmon_driver_group1~0!offset=0] [L1277] assume -2147483648 <= #t~nondet126 && #t~nondet126 <= 2147483647; [L1277] ~tmp~14 := #t~nondet126; [L1277] havoc #t~nondet126; [L1279] #t~switch127 := 0 == ~tmp~14; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=0, ~s3c_hwmon_driver_group1~0!offset=0] [L1278-L1374] COND FALSE !(#t~switch127) [L1331] #t~switch127 := #t~switch127 || 1 == ~tmp~14; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=0, ~s3c_hwmon_driver_group1~0!offset=0] [L1278-L1374] COND TRUE #t~switch127 VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=0, ~s3c_hwmon_driver_group1~0!offset=0] [L1332] COND TRUE 0 != ~ldv_state_variable_0~0 [L1333] assume -2147483648 <= #t~nondet133 && #t~nondet133 <= 2147483647; [L1333] ~tmp___1~1 := #t~nondet133; [L1333] havoc #t~nondet133; [L1335] #t~switch134 := 0 == ~tmp___1~1; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=0, ~s3c_hwmon_driver_group1~0!offset=0] [L1334-L1366] COND FALSE !(#t~switch134) [L1344] #t~switch134 := #t~switch134 || 1 == ~tmp___1~1; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=0, ~s3c_hwmon_driver_group1~0!offset=0] [L1334-L1366] COND TRUE #t~switch134 VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=0, ~s3c_hwmon_driver_group1~0!offset=0] [L1345] COND TRUE 1 == ~ldv_state_variable_0~0 [L1218] havoc ~tmp~12; [L1221] FCALL call #t~ret122 := platform_driver_register(~#s3c_hwmon_driver~0); [L1221] assume -2147483648 <= #t~ret122 && #t~ret122 <= 2147483647; [L1221] ~tmp~12 := #t~ret122; [L1221] havoc #t~ret122; [L1222] #res := ~tmp~12; [L1346] assume -2147483648 <= #t~ret135 && #t~ret135 <= 2147483647; [L1346] ~ldv_retval_2~0 := #t~ret135; [L1346] havoc #t~ret135; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=0, ~s3c_hwmon_driver_group1~0!offset=0] [L1347] COND FALSE !(0 != ~ldv_retval_2~0) [L1353] COND TRUE 0 == ~ldv_retval_2~0 [L1354] ~ldv_state_variable_0~0 := 2; [L1355] ~ldv_state_variable_1~0 := 1; [L1256] havoc ~tmp~13; [L795-L812] ~size := #in~size; [L797] havoc ~p~0; [L798] havoc ~tmp~0; [L799] havoc ~tmp___0~0; [L802] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; [L802] ~tmp___0~0 := #t~nondet29; [L802] havoc #t~nondet29; [L803] COND FALSE !(0 != ~tmp___0~0) [L806] FCALL call #t~malloc30 := #Ultimate.alloc(~size); [L806] ~tmp~0 := #t~malloc30; [L807] ~p~0 := ~tmp~0; [L808] assume 0 != (if 0 != (~p~0!base + ~p~0!offset) % 18446744073709551616 then 1 else 0); [L809] #res := ~p~0; [L1259] ~tmp~13 := #t~ret125; [L1259] havoc #t~ret125; [L1260] assume 0 != (if 0 != (~tmp~13!base + ~tmp~13!offset) % 18446744073709551616 then 1 else 0); [L1261] ~s3c_hwmon_driver_group1~0 := ~tmp~13; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1277] assume -2147483648 <= #t~nondet126 && #t~nondet126 <= 2147483647; [L1277] ~tmp~14 := #t~nondet126; [L1277] havoc #t~nondet126; [L1279] #t~switch127 := 0 == ~tmp~14; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1278-L1374] COND TRUE #t~switch127 VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1280] COND TRUE 0 != ~ldv_state_variable_1~0 [L1281] assume -2147483648 <= #t~nondet128 && #t~nondet128 <= 2147483647; [L1281] ~tmp___0~4 := #t~nondet128; [L1281] havoc #t~nondet128; [L1283] #t~switch129 := 0 == ~tmp___0~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1282-L1325] COND TRUE #t~switch129 VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1284] COND TRUE 1 == ~ldv_state_variable_1~0 VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1285] CALL call #t~ret130 := s3c_hwmon_probe(~s3c_hwmon_driver_group1~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1063-L1186] ~dev := #in~dev; [L1065] havoc ~pdata~2; [L1066] havoc ~hwmon~1; [L1067] havoc ~ret~3; [L1068] havoc ~i~0; [L1069] havoc ~tmp~10; [L1070] FCALL call ~#__key~0 := #Ultimate.alloc(8); [L1071] havoc ~tmp___0~3; [L1072] havoc ~tmp___1~0; [L1073] havoc ~tmp___2~0; [L1074] havoc ~tmp___3~0; [L1075] havoc ~cfg~2; [L1078] FCALL call #t~mem83 := read~$Pointer$({ base: ~dev!base, offset: 277 + ~dev!offset }, 8); [L1078] ~pdata~2 := #t~mem83; [L1078] havoc #t~mem83; [L1079] ~ret~3 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1080] COND FALSE !(0 == (~pdata~2!base + ~pdata~2!offset) % 18446744073709551616) [L1418-L1426] ~size := #in~size; [L1418-L1426] ~flags := #in~flags; [L1420] havoc ~tmp~19; [L813-L830] ~size := #in~size; [L815] havoc ~p~1; [L816] havoc ~tmp~1; [L817] havoc ~tmp___0~1; [L820] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; [L820] ~tmp___0~1 := #t~nondet31; [L820] havoc #t~nondet31; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L821] COND FALSE !(0 != ~tmp___0~1) [L824] FCALL call #t~malloc32 := #Ultimate.alloc((if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296)); VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L824] CALL call #Ultimate.meminit(#t~malloc32, 1, (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296), (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296)); VAL [#amountOfFields=1, #NULL!base=0, #NULL!offset=0, #product=800, #ptr!base=5019, #ptr!offset=0, #sizeOfFields=800, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [?] #memory_int := ~initToZeroAtPointerBaseAddress~int(#memory_int, #ptr!base); [L824] RET call #Ultimate.meminit(#t~malloc32, 1, (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296), (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296)); VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L824] ~tmp~1 := #t~malloc32; [L825] ~p~1 := ~tmp~1; [L826] assume 0 != (if 0 != (~p~1!base + ~p~1!offset) % 18446744073709551616 then 1 else 0); [L827] #res := ~p~1; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1423] ~tmp~19 := #t~ret140; [L1423] havoc #t~ret140; [L1424] #res := ~tmp~19; [L1086] ~tmp~10 := #t~ret86; [L1086] havoc #t~ret86; [L1087] ~hwmon~1 := ~tmp~10; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1088] COND FALSE !(0 == (~hwmon~1!base + ~hwmon~1!offset) % 18446744073709551616) [L909-L917] ~pdev := #in~pdev; [L909-L917] ~data := #in~data; [L914] FCALL call dev_set_drvdata({ base: ~pdev!base, offset: 12 + ~pdev!offset }, ~data); [L1095] FCALL call __mutex_init({ base: ~hwmon~1!base, offset: ~hwmon~1!offset }, #t~string89, ~#__key~0); [L1096-L1098] FCALL call #t~ret90 := s3c_adc_register(~dev, { base: 0, offset: 0 }, { base: 0, offset: 0 }, 0); [L1096-L1098] FCALL call write~$Pointer$(#t~ret90, { base: ~hwmon~1!base, offset: 152 + ~hwmon~1!offset }, 8); [L1096-L1098] havoc #t~ret90; [L1099] FCALL call #t~mem91 := read~$Pointer$({ base: ~hwmon~1!base, offset: 152 + ~hwmon~1!offset }, 8); VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1099] CALL call #t~ret92 := IS_ERR(#t~mem91); VAL [#in~ptr!base=18446744073709551616, #in~ptr!offset=-18446744073709551616, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1391-L1399] ~ptr := #in~ptr; [L1393] havoc ~tmp~16; VAL [#in~ptr!base=18446744073709551616, #in~ptr!offset=-18446744073709551616, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ptr!base=18446744073709551616, ~ptr!offset=-18446744073709551616, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1396] CALL call #t~ret137 := ldv_is_err(~ptr); VAL [#in~ptr!base=18446744073709551616, #in~ptr!offset=-18446744073709551616, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1452-L1459] ~ptr := #in~ptr; [L1457] #res := (if 0 == (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0) then 0 else 1); [L1396] RET call #t~ret137 := ldv_is_err(~ptr); VAL [#in~ptr!base=18446744073709551616, #in~ptr!offset=-18446744073709551616, #NULL!base=0, #NULL!offset=0, #t~ret137=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ptr!base=18446744073709551616, ~ptr!offset=-18446744073709551616, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1396] ~tmp~16 := #t~ret137; [L1396] havoc #t~ret137; [L1397] #res := ~tmp~16 % 256; [L1099] RET call #t~ret92 := IS_ERR(#t~mem91); VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1099] assume -9223372036854775808 <= #t~ret92 && #t~ret92 <= 9223372036854775807; [L1099] ~tmp___1~0 := #t~ret92; [L1099] havoc #t~ret92; [L1099] havoc #t~mem91; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1100] COND FALSE !(0 != ~tmp___1~0) [L944-L951] ~dev := #in~dev; [L949] #res := 0; [L1108] assume -2147483648 <= #t~ret97 && #t~ret97 <= 2147483647; [L1108] ~ret~3 := #t~ret97; [L1108] havoc #t~ret97; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1109] COND FALSE !(0 != ~ret~3) [L1114] FCALL call #t~ret98 := hwmon_device_register({ base: ~dev!base, offset: 12 + ~dev!offset }); [L1114] FCALL call write~$Pointer$(#t~ret98, { base: ~hwmon~1!base, offset: 160 + ~hwmon~1!offset }, 8); [L1114] havoc #t~ret98; [L1115] FCALL call #t~mem99 := read~$Pointer$({ base: ~hwmon~1!base, offset: 160 + ~hwmon~1!offset }, 8); VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1115] CALL call #t~ret100 := IS_ERR(#t~mem99); VAL [#in~ptr!base=9223372036854775808, #in~ptr!offset=27670116110564327424, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1391-L1399] ~ptr := #in~ptr; [L1393] havoc ~tmp~16; VAL [#in~ptr!base=9223372036854775808, #in~ptr!offset=27670116110564327424, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ptr!base=9223372036854775808, ~ptr!offset=27670116110564327424, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1396] CALL call #t~ret137 := ldv_is_err(~ptr); VAL [#in~ptr!base=9223372036854775808, #in~ptr!offset=27670116110564327424, #NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1452-L1459] ~ptr := #in~ptr; [L1457] #res := (if 0 == (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0) then 0 else 1); [L1396] RET call #t~ret137 := ldv_is_err(~ptr); VAL [#in~ptr!base=9223372036854775808, #in~ptr!offset=27670116110564327424, #NULL!base=0, #NULL!offset=0, #t~ret137=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ptr!base=9223372036854775808, ~ptr!offset=27670116110564327424, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1396] ~tmp~16 := #t~ret137; [L1396] havoc #t~ret137; [L1397] #res := ~tmp~16 % 256; [L1115] RET call #t~ret100 := IS_ERR(#t~mem99); VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1115] assume -9223372036854775808 <= #t~ret100 && #t~ret100 <= 9223372036854775807; [L1115] ~tmp___3~0 := #t~ret100; [L1115] havoc #t~mem99; [L1115] havoc #t~ret100; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1116] COND FALSE !(0 != ~tmp___3~0) [L1124] ~i~0 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1169] COND TRUE ~i~0 % 4294967296 <= 7 [L1127] FCALL call #t~mem105 := read~$Pointer$({ base: ~pdata~2!base, offset: ~pdata~2!offset + 8 * ~i~0 }, 8); [L1127] ~cfg~2 := #t~mem105; [L1127] havoc #t~mem105; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1128] COND FALSE !(0 == (~cfg~2!base + ~cfg~2!offset) % 18446744073709551616) [L1133] FCALL call #t~mem106 := read~int({ base: ~cfg~2!base, offset: 8 + ~cfg~2!offset }, 4); [L1133] COND FALSE !(#t~mem106 % 4294967296 > 65535) [L1133] havoc #t~mem106; [L1139] FCALL call #t~mem109 := read~int({ base: ~cfg~2!base, offset: 12 + ~cfg~2!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1139] COND FALSE !(0 == #t~mem109 % 4294967296) [L1139] havoc #t~mem109; [L1145] FCALL call #t~mem112 := read~$Pointer$({ base: ~pdata~2!base, offset: ~pdata~2!offset + 8 * ~i~0 }, 8); [L1013-L1052] ~dev := #in~dev; [L1013-L1052] ~cfg := #in~cfg; [L1013-L1052] ~attrs := #in~attrs; [L1013-L1052] ~channel := #in~channel; [L1016] havoc ~attr~0; [L1017] havoc ~ret~2; [L1020] havoc #t~nondet72; [L1021] ~attr~0 := { base: ~attrs!base, offset: ~attrs!offset }; [L1022] FCALL call write~int(~channel, { base: ~attr~0!base, offset: 42 + ~attr~0!offset }, 4); [L1023] FCALL call write~$Pointer$({ base: ~attrs!base, offset: 92 + ~attrs!offset }, { base: ~attr~0!base, offset: ~attr~0!offset }, 8); [L1024] FCALL call write~int(292, { base: ~attr~0!base, offset: 8 + ~attr~0!offset }, 2); [L1025] FCALL call write~$Pointer$(#funAddr~s3c_hwmon_ch_show, { base: ~attr~0!base, offset: 26 + ~attr~0!offset }, 8); [L1400-L1408] ~ldv_func_arg1 := #in~ldv_func_arg1; [L1400-L1408] ~ldv_func_arg2 := #in~ldv_func_arg2; [L1402] havoc ~tmp~17; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1405] CALL call #t~ret138 := ldv_device_create_file(); VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1508] havoc ~nondetermined~0; [L1509] havoc ~tmp~22; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1512] CALL call #t~ret143 := ldv_undef_int(); VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L854] havoc ~tmp~4; [L857] assume -2147483648 <= #t~nondet35 && #t~nondet35 <= 2147483647; [L857] ~tmp~4 := #t~nondet35; [L857] havoc #t~nondet35; [L858] #res := ~tmp~4; [L1512] RET call #t~ret143 := ldv_undef_int(); VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1512] assume -2147483648 <= #t~ret143 && #t~ret143 <= 2147483647; [L1512] ~nondetermined~0 := #t~ret143; [L1512] havoc #t~ret143; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1513] COND TRUE 0 != ~nondetermined~0 [L1514] ~ldv_count_2~0 := 1 + ~ldv_count_2~0; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1515] COND TRUE ~ldv_count_1~0 < ~ldv_count_2~0 VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L1433] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string102!base=43, #t~string102!offset=0, #t~string108!base=41, #t~string108!offset=0, #t~string111!base=38, #t~string111!offset=0, #t~string115!base=39, #t~string115!offset=0, #t~string121!base=47, #t~string121!offset=0, #t~string52!base=29, #t~string52!offset=0, #t~string53!base=28, #t~string53!offset=0, #t~string65!base=9, #t~string65!offset=0, #t~string70!base=23, #t~string70!offset=0, #t~string73!base=22, #t~string73!offset=0, #t~string76!base=19, #t~string76!offset=0, #t~string79!base=18, #t~string79!offset=0, #t~string82!base=15, #t~string82!offset=0, #t~string85!base=17, #t~string85!offset=0, #t~string88!base=35, #t~string88!offset=0, #t~string89!base=36, #t~string89!offset=0, #t~string94!base=44, #t~string94!offset=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=7, ~#__this_module~0!offset=50, ~#s3c_hwmon_driver~0!base=5, ~#s3c_hwmon_driver~0!offset=0, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_retval_2~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~probed_1~0=0, ~ref_cnt~0=0, ~s3c_hwmon_driver_group1~0!base=18446744073709551615, ~s3c_hwmon_driver_group1~0!offset=0] [L888] int LDV_IN_INTERRUPT = 1; [L889] int ref_cnt ; [L890] int ldv_state_variable_1 ; [L892] int probed_1 = 0; [L893] int ldv_state_variable_0 ; [L1234] int ldv_retval_0 ; [L1235] int ldv_retval_1 ; [L1238] int ldv_retval_2 ; [L1495] int ldv_count_1 = 0; [L1496] int ldv_count_2 = 0; [L891] struct platform_device *s3c_hwmon_driver_group1 ; [L1213-L1215] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1267] int tmp ; [L1268] int tmp___0 ; [L1269] int tmp___1 ; [L1273] ldv_state_variable_1 = 0 [L1274] ref_cnt = 0 [L1275] ldv_state_variable_0 = 1 VAL [__this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=0, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={0:0}] [L1277] tmp = __VERIFIER_nondet_int() [L1279] case 0: [L1331] case 1: VAL [__this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=0, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={0:0}] [L1332] COND TRUE ldv_state_variable_0 != 0 [L1333] tmp___1 = __VERIFIER_nondet_int() [L1335] case 0: [L1344] case 1: VAL [__this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=0, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={0:0}] [L1345] COND TRUE ldv_state_variable_0 == 1 [L1218] int tmp ; [L1221] tmp = platform_driver_register(& s3c_hwmon_driver) [L1222] return (tmp); [L1346] ldv_retval_2 = s3c_hwmon_init() [L1347] COND FALSE !(ldv_retval_2 != 0) [L1353] COND TRUE ldv_retval_2 == 0 [L1354] ldv_state_variable_0 = 2 [L1355] ldv_state_variable_1 = 1 [L1256] void *tmp ; [L797] void *p ; [L798] void *tmp ; [L799] int tmp___0 ; [L802] tmp___0 = __VERIFIER_nondet_int() [L803] COND FALSE !(tmp___0 != 0) [L806] tmp = malloc(size) [L807] p = tmp [L809] return (p); [L1259] tmp = ldv_malloc(624U) [L1261] s3c_hwmon_driver_group1 = (struct platform_device *)tmp VAL [__this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1277] tmp = __VERIFIER_nondet_int() [L1279] case 0: VAL [__this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1280] COND TRUE ldv_state_variable_1 != 0 [L1281] tmp___0 = __VERIFIER_nondet_int() [L1283] case 0: VAL [__this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1284] COND TRUE ldv_state_variable_1 == 1 VAL [__this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1285] CALL s3c_hwmon_probe(s3c_hwmon_driver_group1) VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1065] struct s3c_hwmon_pdata *pdata ; [L1066] struct s3c_hwmon *hwmon ; [L1067] int ret ; [L1068] int i ; [L1069] void *tmp ; [L1070] struct lock_class_key __key ; [L1071] long tmp___0 ; [L1072] long tmp___1 ; [L1073] long tmp___2 ; [L1074] long tmp___3 ; [L1075] struct s3c_hwmon_chcfg *cfg ; [L1078] EXPR dev->dev.platform_data [L1078] pdata = (struct s3c_hwmon_pdata *)dev->dev.platform_data [L1079] ret = 0 VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1080] COND FALSE !((unsigned long )pdata == (unsigned long )((struct s3c_hwmon_pdata *)0)) [L1420] void *tmp ; [L815] void *p ; [L816] void *tmp ; [L817] int tmp___0 ; [L820] tmp___0 = __VERIFIER_nondet_int() [L821] COND FALSE !(tmp___0 != 0) [L824] EXPR, FCALL calloc(1U, size) VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L824] tmp = calloc(1U, size) [L825] p = tmp [L827] return (p); VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1423] tmp = ldv_zalloc(size) [L1424] return (tmp); [L1086] tmp = ldv_kzalloc_9(800U, 208U) [L1087] hwmon = (struct s3c_hwmon *)tmp VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1088] COND FALSE !((unsigned long )hwmon == (unsigned long )((struct s3c_hwmon *)0)) [L1096-L1098] hwmon->client = s3c_adc_register(dev, (void (*)(struct s3c_adc_client * , unsigned int ))0, (void (*)(struct s3c_adc_client * , unsigned int , unsigned int , unsigned int * ))0, 0U) [L1099] EXPR hwmon->client VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1099] CALL, EXPR IS_ERR((void const *)hwmon->client) VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ptr={18446744073709551616:-18446744073709551616}, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1393] bool tmp ; VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ptr={18446744073709551616:-18446744073709551616}, ptr={18446744073709551616:-18446744073709551616}, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1396] CALL, EXPR ldv_is_err(ptr) VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ptr={18446744073709551616:-18446744073709551616}, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1457] return ((unsigned long )ptr > 2012UL); [L1396] RET, EXPR ldv_is_err(ptr) VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ptr={18446744073709551616:-18446744073709551616}, ptr={18446744073709551616:-18446744073709551616}, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1396] tmp = ldv_is_err(ptr) [L1397] return ((long )tmp); [L1099] RET, EXPR IS_ERR((void const *)hwmon->client) VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1099] tmp___1 = IS_ERR((void const *)hwmon->client) [L1100] COND FALSE !(tmp___1 != 0L) [L949] return (0); [L1108] ret = s3c_hwmon_add_raw(& dev->dev) [L1109] COND FALSE !(ret != 0) [L1114] hwmon->hwmon_dev = hwmon_device_register(& dev->dev) [L1115] EXPR hwmon->hwmon_dev VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1115] CALL, EXPR IS_ERR((void const *)hwmon->hwmon_dev) VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ptr={9223372036854775808:27670116110564327424}, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1393] bool tmp ; VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ptr={9223372036854775808:27670116110564327424}, ptr={9223372036854775808:27670116110564327424}, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1396] CALL, EXPR ldv_is_err(ptr) VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ptr={9223372036854775808:27670116110564327424}, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1457] return ((unsigned long )ptr > 2012UL); [L1396] RET, EXPR ldv_is_err(ptr) VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ptr={9223372036854775808:27670116110564327424}, ptr={9223372036854775808:27670116110564327424}, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1396] tmp = ldv_is_err(ptr) [L1397] return ((long )tmp); [L1115] RET, EXPR IS_ERR((void const *)hwmon->hwmon_dev) VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1115] tmp___3 = IS_ERR((void const *)hwmon->hwmon_dev) [L1116] COND FALSE !(tmp___3 != 0L) [L1124] i = 0 VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1169] COND TRUE (unsigned int )i <= 7U [L1127] EXPR pdata->in[i] [L1127] cfg = pdata->in[i] [L1128] COND FALSE !((unsigned long )cfg == (unsigned long )((struct s3c_hwmon_chcfg *)0)) [L1133] EXPR cfg->mult [L1133] COND FALSE !(cfg->mult > 65535U) [L1139] EXPR cfg->div VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1139] COND FALSE !(cfg->div == 0U) [L1145] pdata->in[i] [L1016] struct sensor_device_attribute *attr ; [L1017] int ret ; [L1021] attr = & attrs->in [L1022] attr->index = channel [L1023] attr->dev_attr.attr.name = (char const *)(& attrs->in_name) [L1024] attr->dev_attr.attr.mode = 292U [L1025] attr->dev_attr.show = & s3c_hwmon_ch_show [L1402] int tmp ; VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1405] CALL ldv_device_create_file() VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1508] int nondetermined ; [L1509] int tmp ; VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1512] CALL, EXPR ldv_undef_int() VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L854] int tmp ; [L857] tmp = __VERIFIER_nondet_int() [L858] return (tmp); [L1512] RET, EXPR ldv_undef_int() VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1512] nondetermined = ldv_undef_int() [L1513] COND TRUE nondetermined != 0 [L1514] ldv_count_2 = ldv_count_2 + 1 VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1515] COND TRUE ldv_count_1 < ldv_count_2 VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1433] __VERIFIER_error() VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] ----- [2018-11-22 22:15:53,839 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck CFG 22.11 10:15:53 ImpRootNode [2018-11-22 22:15:53,839 INFO L132 PluginConnector]: ------------------------ END CodeCheck---------------------------- [2018-11-22 22:15:53,840 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-22 22:15:53,840 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-22 22:15:53,840 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-22 22:15:53,840 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.11 10:15:50" (3/4) ... [2018-11-22 22:15:53,843 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-22 22:15:53,844 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-22 22:15:53,844 INFO L168 Benchmark]: Toolchain (without parser) took 4743.66 ms. Allocated memory was 1.0 GB in the beginning and 1.3 GB in the end (delta: 239.6 MB). Free memory was 956.6 MB in the beginning and 1.1 GB in the end (delta: -114.5 MB). Peak memory consumption was 125.1 MB. Max. memory is 11.5 GB. [2018-11-22 22:15:53,846 INFO L168 Benchmark]: CDTParser took 0.11 ms. Allocated memory is still 1.0 GB. Free memory is still 985.5 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-22 22:15:53,846 INFO L168 Benchmark]: CACSL2BoogieTranslator took 513.98 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 151.5 MB). Free memory was 956.6 MB in the beginning and 1.1 GB in the end (delta: -174.1 MB). Peak memory consumption was 46.2 MB. Max. memory is 11.5 GB. [2018-11-22 22:15:53,861 INFO L168 Benchmark]: Boogie Procedure Inliner took 52.39 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 3.3 MB). Peak memory consumption was 3.3 MB. Max. memory is 11.5 GB. [2018-11-22 22:15:53,861 INFO L168 Benchmark]: Boogie Preprocessor took 40.67 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. [2018-11-22 22:15:53,862 INFO L168 Benchmark]: RCFGBuilder took 890.18 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 115.3 MB). Peak memory consumption was 115.3 MB. Max. memory is 11.5 GB. [2018-11-22 22:15:53,862 INFO L168 Benchmark]: CodeCheck took 3239.55 ms. Allocated memory was 1.2 GB in the beginning and 1.3 GB in the end (delta: 88.1 MB). Free memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: -65.8 MB). Peak memory consumption was 22.2 MB. Max. memory is 11.5 GB. [2018-11-22 22:15:53,863 INFO L168 Benchmark]: Witness Printer took 4.04 ms. Allocated memory is still 1.3 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-22 22:15:53,866 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck: - StatisticsResult: Ultimate CodeCheck benchmark data CFG has 13 procedures, 150 locations, 1 error locations. UNSAFE Result, 1.8s OverallTime, 9 OverallIterations, 0 TraceHistogramMax, 0.0s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 8562 SDtfs, 2008 SDslu, 4736 SDs, 0 SdLazy, 4778 SolverSat, 1322 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.6s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 2686 GetRequests, 2666 SyntacticMatches, 2 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 71 ImplicationChecksByTransitivity, 0.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=-1occurred in iteration=-1, traceCheckStatistics: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 0.3s InterpolantComputationTime, 444 NumberOfCodeBlocks, 444 NumberOfCodeBlocksAsserted, 9 NumberOfCheckSat, 381 ConstructedInterpolants, 0 QuantifiedInterpolants, 21651 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 8 InterpolantComputations, 8 PerfectInterpolantSequences, 67/67 InterpolantCoveringCapability, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: No data available, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: No data available, ReuseStatistics: No data available - UnprovableResult [Line: 1433]: Unable to prove that call of __VERIFIER_error() unreachable Unable to prove that call of __VERIFIER_error() unreachable Reason: overapproximation of large string literal at line 1213. Possible FailurePath: [L888] int LDV_IN_INTERRUPT = 1; [L889] int ref_cnt ; [L890] int ldv_state_variable_1 ; [L892] int probed_1 = 0; [L893] int ldv_state_variable_0 ; [L1234] int ldv_retval_0 ; [L1235] int ldv_retval_1 ; [L1238] int ldv_retval_2 ; [L1495] int ldv_count_1 = 0; [L1496] int ldv_count_2 = 0; [L891] struct platform_device *s3c_hwmon_driver_group1 ; [L1213-L1215] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1267] int tmp ; [L1268] int tmp___0 ; [L1269] int tmp___1 ; [L1273] ldv_state_variable_1 = 0 [L1274] ref_cnt = 0 [L1275] ldv_state_variable_0 = 1 VAL [__this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=0, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={0:0}] [L1277] tmp = __VERIFIER_nondet_int() [L1279] case 0: [L1331] case 1: VAL [__this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=0, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={0:0}] [L1332] COND TRUE ldv_state_variable_0 != 0 [L1333] tmp___1 = __VERIFIER_nondet_int() [L1335] case 0: [L1344] case 1: VAL [__this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=0, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={0:0}] [L1345] COND TRUE ldv_state_variable_0 == 1 [L1218] int tmp ; [L1221] tmp = platform_driver_register(& s3c_hwmon_driver) [L1222] return (tmp); [L1346] ldv_retval_2 = s3c_hwmon_init() [L1347] COND FALSE !(ldv_retval_2 != 0) [L1353] COND TRUE ldv_retval_2 == 0 [L1354] ldv_state_variable_0 = 2 [L1355] ldv_state_variable_1 = 1 [L1256] void *tmp ; [L797] void *p ; [L798] void *tmp ; [L799] int tmp___0 ; [L802] tmp___0 = __VERIFIER_nondet_int() [L803] COND FALSE !(tmp___0 != 0) [L806] tmp = malloc(size) [L807] p = tmp [L809] return (p); [L1259] tmp = ldv_malloc(624U) [L1261] s3c_hwmon_driver_group1 = (struct platform_device *)tmp VAL [__this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1277] tmp = __VERIFIER_nondet_int() [L1279] case 0: VAL [__this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1280] COND TRUE ldv_state_variable_1 != 0 [L1281] tmp___0 = __VERIFIER_nondet_int() [L1283] case 0: VAL [__this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1284] COND TRUE ldv_state_variable_1 == 1 VAL [__this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1285] CALL s3c_hwmon_probe(s3c_hwmon_driver_group1) VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1065] struct s3c_hwmon_pdata *pdata ; [L1066] struct s3c_hwmon *hwmon ; [L1067] int ret ; [L1068] int i ; [L1069] void *tmp ; [L1070] struct lock_class_key __key ; [L1071] long tmp___0 ; [L1072] long tmp___1 ; [L1073] long tmp___2 ; [L1074] long tmp___3 ; [L1075] struct s3c_hwmon_chcfg *cfg ; [L1078] EXPR dev->dev.platform_data [L1078] pdata = (struct s3c_hwmon_pdata *)dev->dev.platform_data [L1079] ret = 0 VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1080] COND FALSE !((unsigned long )pdata == (unsigned long )((struct s3c_hwmon_pdata *)0)) [L1420] void *tmp ; [L815] void *p ; [L816] void *tmp ; [L817] int tmp___0 ; [L820] tmp___0 = __VERIFIER_nondet_int() [L821] COND FALSE !(tmp___0 != 0) [L824] EXPR, FCALL calloc(1U, size) VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L824] tmp = calloc(1U, size) [L825] p = tmp [L827] return (p); VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1423] tmp = ldv_zalloc(size) [L1424] return (tmp); [L1086] tmp = ldv_kzalloc_9(800U, 208U) [L1087] hwmon = (struct s3c_hwmon *)tmp VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1088] COND FALSE !((unsigned long )hwmon == (unsigned long )((struct s3c_hwmon *)0)) [L1096-L1098] hwmon->client = s3c_adc_register(dev, (void (*)(struct s3c_adc_client * , unsigned int ))0, (void (*)(struct s3c_adc_client * , unsigned int , unsigned int , unsigned int * ))0, 0U) [L1099] EXPR hwmon->client VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1099] CALL, EXPR IS_ERR((void const *)hwmon->client) VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ptr={18446744073709551616:-18446744073709551616}, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1393] bool tmp ; VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ptr={18446744073709551616:-18446744073709551616}, ptr={18446744073709551616:-18446744073709551616}, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1396] CALL, EXPR ldv_is_err(ptr) VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ptr={18446744073709551616:-18446744073709551616}, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1457] return ((unsigned long )ptr > 2012UL); [L1396] RET, EXPR ldv_is_err(ptr) VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ptr={18446744073709551616:-18446744073709551616}, ptr={18446744073709551616:-18446744073709551616}, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1396] tmp = ldv_is_err(ptr) [L1397] return ((long )tmp); [L1099] RET, EXPR IS_ERR((void const *)hwmon->client) VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1099] tmp___1 = IS_ERR((void const *)hwmon->client) [L1100] COND FALSE !(tmp___1 != 0L) [L949] return (0); [L1108] ret = s3c_hwmon_add_raw(& dev->dev) [L1109] COND FALSE !(ret != 0) [L1114] hwmon->hwmon_dev = hwmon_device_register(& dev->dev) [L1115] EXPR hwmon->hwmon_dev VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1115] CALL, EXPR IS_ERR((void const *)hwmon->hwmon_dev) VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ptr={9223372036854775808:27670116110564327424}, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1393] bool tmp ; VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ptr={9223372036854775808:27670116110564327424}, ptr={9223372036854775808:27670116110564327424}, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1396] CALL, EXPR ldv_is_err(ptr) VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ptr={9223372036854775808:27670116110564327424}, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1457] return ((unsigned long )ptr > 2012UL); [L1396] RET, EXPR ldv_is_err(ptr) VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ptr={9223372036854775808:27670116110564327424}, ptr={9223372036854775808:27670116110564327424}, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1396] tmp = ldv_is_err(ptr) [L1397] return ((long )tmp); [L1115] RET, EXPR IS_ERR((void const *)hwmon->hwmon_dev) VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1115] tmp___3 = IS_ERR((void const *)hwmon->hwmon_dev) [L1116] COND FALSE !(tmp___3 != 0L) [L1124] i = 0 VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1169] COND TRUE (unsigned int )i <= 7U [L1127] EXPR pdata->in[i] [L1127] cfg = pdata->in[i] [L1128] COND FALSE !((unsigned long )cfg == (unsigned long )((struct s3c_hwmon_chcfg *)0)) [L1133] EXPR cfg->mult [L1133] COND FALSE !(cfg->mult > 65535U) [L1139] EXPR cfg->div VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1139] COND FALSE !(cfg->div == 0U) [L1145] pdata->in[i] [L1016] struct sensor_device_attribute *attr ; [L1017] int ret ; [L1021] attr = & attrs->in [L1022] attr->index = channel [L1023] attr->dev_attr.attr.name = (char const *)(& attrs->in_name) [L1024] attr->dev_attr.attr.mode = 292U [L1025] attr->dev_attr.show = & s3c_hwmon_ch_show [L1402] int tmp ; VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1405] CALL ldv_device_create_file() VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1508] int nondetermined ; [L1509] int tmp ; VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1512] CALL, EXPR ldv_undef_int() VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L854] int tmp ; [L857] tmp = __VERIFIER_nondet_int() [L858] return (tmp); [L1512] RET, EXPR ldv_undef_int() VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1512] nondetermined = ldv_undef_int() [L1513] COND TRUE nondetermined != 0 [L1514] ldv_count_2 = ldv_count_2 + 1 VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1515] COND TRUE ldv_count_1 < ldv_count_2 VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] [L1433] __VERIFIER_error() VAL [\old(ldv_count_2)=0, __this_module={7:50}, ldv_count_1=0, ldv_count_2=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=2, ldv_state_variable_1=1, probed_1=0, ref_cnt=0, s3c_hwmon_driver={5:0}, s3c_hwmon_driver_group1={18446744073709551615:0}] * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.11 ms. Allocated memory is still 1.0 GB. Free memory is still 985.5 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 513.98 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 151.5 MB). Free memory was 956.6 MB in the beginning and 1.1 GB in the end (delta: -174.1 MB). Peak memory consumption was 46.2 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 52.39 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 3.3 MB). Peak memory consumption was 3.3 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 40.67 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. * RCFGBuilder took 890.18 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 115.3 MB). Peak memory consumption was 115.3 MB. Max. memory is 11.5 GB. * CodeCheck took 3239.55 ms. Allocated memory was 1.2 GB in the beginning and 1.3 GB in the end (delta: 88.1 MB). Free memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: -65.8 MB). Peak memory consumption was 22.2 MB. Max. memory is 11.5 GB. * Witness Printer took 4.04 ms. Allocated memory is still 1.3 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces Received shutdown request... ### Bit-precise run ### This is Ultimate 0.1.23-aa41828 [2018-11-22 22:15:55,647 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-22 22:15:55,649 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-22 22:15:55,657 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-22 22:15:55,657 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-22 22:15:55,658 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-22 22:15:55,659 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-22 22:15:55,660 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-22 22:15:55,661 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-22 22:15:55,662 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-22 22:15:55,662 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-22 22:15:55,663 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-22 22:15:55,664 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-22 22:15:55,664 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-22 22:15:55,665 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-22 22:15:55,666 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-22 22:15:55,666 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-22 22:15:55,667 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-22 22:15:55,669 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-22 22:15:55,670 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-22 22:15:55,670 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-22 22:15:55,671 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-22 22:15:55,673 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-22 22:15:55,673 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-22 22:15:55,673 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-22 22:15:55,674 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-22 22:15:55,675 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-22 22:15:55,676 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-22 22:15:55,676 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-22 22:15:55,677 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-22 22:15:55,677 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-22 22:15:55,678 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-22 22:15:55,678 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-22 22:15:55,678 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-22 22:15:55,679 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-22 22:15:55,680 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-22 22:15:55,680 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_d4d620cd-204f-496c-aebb-7f1e952d9a48/bin-2019/ukojak/config/svcomp-Reach-64bit-Kojak_Bitvector.epf [2018-11-22 22:15:55,690 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-22 22:15:55,690 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-22 22:15:55,691 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-22 22:15:55,691 INFO L133 SettingsManager]: * ... to procedures called more than once=ALWAYS [2018-11-22 22:15:55,692 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-22 22:15:55,692 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-22 22:15:55,692 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-22 22:15:55,692 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-22 22:15:55,692 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-22 22:15:55,692 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-22 22:15:55,693 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-22 22:15:55,693 INFO L133 SettingsManager]: * Use bitvectors instead of ints=true [2018-11-22 22:15:55,693 INFO L133 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2018-11-22 22:15:55,693 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-22 22:15:55,693 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-22 22:15:55,693 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-22 22:15:55,693 INFO L131 SettingsManager]: Preferences of CodeCheck differ from their defaults: [2018-11-22 22:15:55,693 INFO L133 SettingsManager]: * Timeout in seconds=1000000 [2018-11-22 22:15:55,694 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-22 22:15:55,694 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-22 22:15:55,694 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 [2018-11-22 22:15:55,694 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-22 22:15:55,694 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-22 22:15:55,694 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-22 22:15:55,694 INFO L133 SettingsManager]: * Use separate solver for trace checks=false [2018-11-22 22:15:55,694 INFO L133 SettingsManager]: * Trace refinement strategy=WALRUS [2018-11-22 22:15:55,695 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-22 22:15:55,695 INFO L133 SettingsManager]: * Command for external solver=cvc4nyu --tear-down-incremental --rewrite-divk --print-success --lang smt [2018-11-22 22:15:55,695 INFO L133 SettingsManager]: * Logic for external solver=AUFBV [2018-11-22 22:15:55,695 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-22 22:15:55,697 INFO L133 SettingsManager]: * To the following directory=dump/ Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_d4d620cd-204f-496c-aebb-7f1e952d9a48/bin-2019/ukojak Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Kojak Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 506e9770d381a9f564fa805f945530032a6829a8 [2018-11-22 22:15:55,727 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-22 22:15:55,736 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-22 22:15:55,739 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-22 22:15:55,740 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-22 22:15:55,740 INFO L276 PluginConnector]: CDTParser initialized [2018-11-22 22:15:55,741 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_d4d620cd-204f-496c-aebb-7f1e952d9a48/bin-2019/ukojak/../../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point_ldv-val-v0.8_false-unreach-call.cil.out.c [2018-11-22 22:15:55,779 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_d4d620cd-204f-496c-aebb-7f1e952d9a48/bin-2019/ukojak/data/9d28193e2/1eb4e839135248bdbc322005ba994870/FLAG17282c9f3 [2018-11-22 22:15:56,251 INFO L307 CDTParser]: Found 1 translation units. [2018-11-22 22:15:56,251 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_d4d620cd-204f-496c-aebb-7f1e952d9a48/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point_ldv-val-v0.8_false-unreach-call.cil.out.c [2018-11-22 22:15:56,263 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_d4d620cd-204f-496c-aebb-7f1e952d9a48/bin-2019/ukojak/data/9d28193e2/1eb4e839135248bdbc322005ba994870/FLAG17282c9f3 [2018-11-22 22:15:56,762 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_d4d620cd-204f-496c-aebb-7f1e952d9a48/bin-2019/ukojak/data/9d28193e2/1eb4e839135248bdbc322005ba994870 [2018-11-22 22:15:56,765 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-22 22:15:56,765 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-22 22:15:56,766 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-22 22:15:56,766 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-22 22:15:56,769 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-22 22:15:56,769 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.11 10:15:56" (1/1) ... [2018-11-22 22:15:56,771 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6b72abd0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:15:56, skipping insertion in model container [2018-11-22 22:15:56,771 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.11 10:15:56" (1/1) ... [2018-11-22 22:15:56,777 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-22 22:15:56,814 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-22 22:15:57,126 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-22 22:15:57,184 INFO L191 MainTranslator]: Completed pre-run [2018-11-22 22:15:57,262 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-22 22:15:57,297 INFO L195 MainTranslator]: Completed translation [2018-11-22 22:15:57,297 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:15:57 WrapperNode [2018-11-22 22:15:57,297 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-22 22:15:57,298 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-22 22:15:57,298 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-22 22:15:57,298 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-22 22:15:57,306 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:15:57" (1/1) ... [2018-11-22 22:15:57,323 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:15:57" (1/1) ... [2018-11-22 22:15:57,350 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-22 22:15:57,350 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-22 22:15:57,351 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-22 22:15:57,351 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-22 22:15:57,362 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:15:57" (1/1) ... [2018-11-22 22:15:57,362 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:15:57" (1/1) ... [2018-11-22 22:15:57,372 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:15:57" (1/1) ... [2018-11-22 22:15:57,372 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:15:57" (1/1) ... [2018-11-22 22:15:57,387 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:15:57" (1/1) ... [2018-11-22 22:15:57,390 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:15:57" (1/1) ... [2018-11-22 22:15:57,394 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:15:57" (1/1) ... [2018-11-22 22:15:57,398 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-22 22:15:57,399 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-22 22:15:57,399 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-22 22:15:57,399 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-22 22:15:57,399 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:15:57" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_d4d620cd-204f-496c-aebb-7f1e952d9a48/bin-2019/ukojak/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 [2018-11-22 22:15:57,446 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_hwmon_remove_raw [2018-11-22 22:15:57,446 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_hwmon_remove_raw [2018-11-22 22:15:57,446 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_hwmon_probe [2018-11-22 22:15:57,446 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_hwmon_probe [2018-11-22 22:15:57,446 INFO L130 BoogieDeclarations]: Found specification of procedure dev_get_drvdata [2018-11-22 22:15:57,446 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2018-11-22 22:15:57,446 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2018-11-22 22:15:57,446 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-22 22:15:57,446 INFO L130 BoogieDeclarations]: Found specification of procedure platform_driver_unregister [2018-11-22 22:15:57,447 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-22 22:15:57,447 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2018-11-22 22:15:57,447 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2018-11-22 22:15:57,447 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2018-11-22 22:15:57,448 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2018-11-22 22:15:57,448 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2018-11-22 22:15:57,448 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-22 22:15:57,449 INFO L130 BoogieDeclarations]: Found specification of procedure hwmon_device_register [2018-11-22 22:15:57,449 INFO L130 BoogieDeclarations]: Found specification of procedure platform_driver_register [2018-11-22 22:15:57,449 INFO L130 BoogieDeclarations]: Found specification of procedure PTR_ERR [2018-11-22 22:15:57,449 INFO L138 BoogieDeclarations]: Found implementation of procedure PTR_ERR [2018-11-22 22:15:57,449 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err [2018-11-22 22:15:57,449 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err [2018-11-22 22:15:57,449 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_adc_register [2018-11-22 22:15:57,449 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_hwmon_remove_attr [2018-11-22 22:15:57,449 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_hwmon_remove_attr [2018-11-22 22:15:57,449 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2018-11-22 22:15:57,450 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2018-11-22 22:15:57,450 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2018-11-22 22:15:57,450 INFO L130 BoogieDeclarations]: Found specification of procedure dev_set_drvdata [2018-11-22 22:15:57,450 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-22 22:15:57,450 INFO L130 BoogieDeclarations]: Found specification of procedure platform_get_drvdata [2018-11-22 22:15:57,450 INFO L138 BoogieDeclarations]: Found implementation of procedure platform_get_drvdata [2018-11-22 22:15:57,450 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2018-11-22 22:15:57,450 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2018-11-22 22:15:57,450 INFO L130 BoogieDeclarations]: Found specification of procedure hwmon_device_unregister [2018-11-22 22:15:57,450 INFO L130 BoogieDeclarations]: Found specification of procedure __mutex_init [2018-11-22 22:15:57,451 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_adc_release [2018-11-22 22:15:57,451 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_hwmon_remove [2018-11-22 22:15:57,451 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_hwmon_remove [2018-11-22 22:15:57,451 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_final_state [2018-11-22 22:15:57,451 INFO L130 BoogieDeclarations]: Found specification of procedure device_remove_file [2018-11-22 22:15:57,451 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-22 22:15:57,451 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-22 22:15:57,451 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_device_create_file [2018-11-22 22:15:57,451 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_device_create_file [2018-11-22 22:15:57,452 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2018-11-22 22:15:57,452 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2018-11-22 22:15:59,122 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-22 22:15:59,123 INFO L280 CfgBuilder]: Removed 34 assue(true) statements. [2018-11-22 22:15:59,123 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.11 10:15:59 BoogieIcfgContainer [2018-11-22 22:15:59,123 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-22 22:15:59,124 INFO L113 PluginConnector]: ------------------------CodeCheck---------------------------- [2018-11-22 22:15:59,124 INFO L271 PluginConnector]: Initializing CodeCheck... [2018-11-22 22:15:59,134 INFO L276 PluginConnector]: CodeCheck initialized [2018-11-22 22:15:59,135 INFO L185 PluginConnector]: Executing the observer CodeCheckObserver from plugin CodeCheck for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.11 10:15:59" (1/1) ... [2018-11-22 22:15:59,145 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:15:59,172 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-22 22:15:59,181 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 155 states to 115 states and 155 transitions. [2018-11-22 22:15:59,182 INFO L276 IsEmpty]: Start isEmpty. Operand 115 states and 155 transitions. [2018-11-22 22:15:59,189 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2018-11-22 22:15:59,189 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-22 22:15:59,227 FATAL L292 ToolchainWalker]: The Plugin de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck has thrown an exception: java.lang.IllegalArgumentException: Indexed Sort BitVec undefined at de.uni_freiburg.informatik.ultimate.logic.SortSymbol.checkArity(SortSymbol.java:153) at de.uni_freiburg.informatik.ultimate.logic.SortSymbol.getSort(SortSymbol.java:177) at de.uni_freiburg.informatik.ultimate.logic.Theory.getSort(Theory.java:1243) at de.uni_freiburg.informatik.ultimate.logic.NoopScript.sort(NoopScript.java:287) at de.uni_freiburg.informatik.ultimate.modelcheckerutils.smt.TermTransferrer.transferSort(TermTransferrer.java:128) at de.uni_freiburg.informatik.ultimate.modelcheckerutils.smt.TermTransferrer.convertApplicationTerm(TermTransferrer.java:162) at de.uni_freiburg.informatik.ultimate.logic.TermTransformer$BuildApplicationTerm.walk(TermTransformer.java:320) at de.uni_freiburg.informatik.ultimate.logic.NonRecursive.run(NonRecursive.java:122) at de.uni_freiburg.informatik.ultimate.logic.NonRecursive.run(NonRecursive.java:113) at de.uni_freiburg.informatik.ultimate.logic.TermTransformer.transform(TermTransformer.java:253) at de.uni_freiburg.informatik.ultimate.modelcheckerutils.cfg.SmtSymbols.transferSymbols(SmtSymbols.java:129) at de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck.CodeCheckObserver.process(CodeCheckObserver.java:449) at de.uni_freiburg.informatik.ultimate.core.coreplugin.modelwalker.CFGWalker.runObserver(CFGWalker.java:57) at de.uni_freiburg.informatik.ultimate.core.coreplugin.modelwalker.BaseWalker.runObserver(BaseWalker.java:93) at de.uni_freiburg.informatik.ultimate.core.coreplugin.modelwalker.BaseWalker.run(BaseWalker.java:86) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runObserver(PluginConnector.java:167) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runTool(PluginConnector.java:151) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.run(PluginConnector.java:128) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.executePluginConnector(ToolchainWalker.java:232) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.processPlugin(ToolchainWalker.java:226) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walkUnprotected(ToolchainWalker.java:142) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walk(ToolchainWalker.java:104) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainManager$Toolchain.processToolchain(ToolchainManager.java:316) at de.uni_freiburg.informatik.ultimate.core.coreplugin.toolchain.DefaultToolchainJob.run(DefaultToolchainJob.java:145) at org.eclipse.core.internal.jobs.Worker.run(Worker.java:55) [2018-11-22 22:15:59,230 INFO L168 Benchmark]: Toolchain (without parser) took 2465.32 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 132.6 MB). Free memory was 943.8 MB in the beginning and 974.7 MB in the end (delta: -30.9 MB). Peak memory consumption was 101.7 MB. Max. memory is 11.5 GB. [2018-11-22 22:15:59,232 INFO L168 Benchmark]: CDTParser took 0.19 ms. Allocated memory is still 1.0 GB. Free memory is still 978.7 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-22 22:15:59,232 INFO L168 Benchmark]: CACSL2BoogieTranslator took 531.68 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 132.6 MB). Free memory was 943.8 MB in the beginning and 1.1 GB in the end (delta: -161.5 MB). Peak memory consumption was 46.3 MB. Max. memory is 11.5 GB. [2018-11-22 22:15:59,233 INFO L168 Benchmark]: Boogie Procedure Inliner took 52.16 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. [2018-11-22 22:15:59,233 INFO L168 Benchmark]: Boogie Preprocessor took 47.95 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-22 22:15:59,234 INFO L168 Benchmark]: RCFGBuilder took 1724.65 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 981.4 MB in the end (delta: 117.3 MB). Peak memory consumption was 117.3 MB. Max. memory is 11.5 GB. [2018-11-22 22:15:59,234 INFO L168 Benchmark]: CodeCheck took 106.10 ms. Allocated memory is still 1.2 GB. Free memory was 981.4 MB in the beginning and 974.7 MB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. [2018-11-22 22:15:59,237 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck: - ExceptionOrErrorResult: IllegalArgumentException: Indexed Sort BitVec undefined de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck: IllegalArgumentException: Indexed Sort BitVec undefined: de.uni_freiburg.informatik.ultimate.logic.SortSymbol.checkArity(SortSymbol.java:153) * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.19 ms. Allocated memory is still 1.0 GB. Free memory is still 978.7 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 531.68 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 132.6 MB). Free memory was 943.8 MB in the beginning and 1.1 GB in the end (delta: -161.5 MB). Peak memory consumption was 46.3 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 52.16 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 47.95 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * RCFGBuilder took 1724.65 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 981.4 MB in the end (delta: 117.3 MB). Peak memory consumption was 117.3 MB. Max. memory is 11.5 GB. * CodeCheck took 106.10 ms. Allocated memory is still 1.2 GB. Free memory was 981.4 MB in the beginning and 974.7 MB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. RESULT: Ultimate could not prove your program: Toolchain returned no result. Received shutdown request...